how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.7s skew, nonce fresh
07✕post approval integrityrelease_escrow was f9a055f3564d… at approval and is 2f046985f218… now
why
post_approval_integritytool_definition_changed
release_escrow was f9a055f3564d… at approval and is 2f046985f218… now
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCA6VTDMZLVGQWWEUDYCOLXXEGXMYX4UKUEOBD7ARKK4FUHZCUCS44VH
- operations
- 1
- op 0 · movement
- 937.1669670 USDC → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice e1f96f
- tool_call (not trusted)
- release_escrow(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 356d4f05a8b0022c · signed
- clock skew
- 1.7s against a 60s replay window
- tool approved
- release_escrow · f9a055f3564d4214d5dc8d13…
- tool executing
- 2f046985f218c8cfb5afeab8… · changed since approval
- policy commitment
- d3ef096bdabb7e3f168cca35…
provenance
- actor
- agt_cloud-spend_06f8
- mandate
- courier float
- mandate hash
- 44b4f567358a7907d331809f81bd053a5bd1ff4adbe8b38d148368d6a597ce2b
- rule hash
- d3ef096bdabb7e3f168cca35e71b0ac1b4491cf3c712e418c538a779175ca4bb
- request hash
- 21a0b9f29e4ca212f46628e485952b373b31ce0b5eec535f0e76b0642e546fd3
- transaction
- e7cc8b583c763f0fcedde99253bc87efef2d7811bcf84d5a582e11459a6f14a2
the receipt
- entry
- 5507 of 7535
- previous entry
- a235a44420d03e696888098f90f732a23bd496e9e1043c590b3a9c674aebecbb
- leaf hash
- 601d72f1af8a8f36e7cf575f4dc007bb1a5f44fd84e2b373aac7c69731b6f8de
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- +ovkx9pMyqoSuWG8pclkwm9ZKupRW2QubBjNOVl9RzaPZ5Feujyd+diqs92prt5rsouV5DmeI86zn0nyzAtXAA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 1187c3db1c…b100b6
0lefta235a44420d03e6968…674aebecbb
1left0d86c12df11078cf75…f5f6b4123a
2right7c943fb77e245dcd37…c3ce860eb0
3rightd22cd03273b6b44512…04a59e83a0
4right130d2c4a190f0553c8…72d9065224
5right3872afe61389897d78…09c3c3f892
6righte190dcbd679803e7aa…7b4289c505
7leftcf832b259177631891…51131d8cfd
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right47684231be5d72c183…a2553113b0
12leftdc8527842d65829ab0…fb53df942a
root
1187c3db1c62e0e686b85eaee1c32c41a4de2d3d375381322cddd9a14fb100b6