how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays GDKNRTWH46MFLOV7552OBYES23WWEQ4QTXX3BXT6JMFAW6UVKTWI4YPT, which is not in the allowlist
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, -1.3s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandatedestination_not_allowed
op 0 pays GDKNRTWH46MFLOV7552OBYES23WWEQ4QTXX3BXT6JMFAW6UVKTWI4YPT, which is not in the allowlist
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 3787.6090428 USDC → GDKNRTWH46MFLOV7552OBYES23WWEQ4QTXX3BXT6JMFAW6UVKTWI4YPT
- memo (not trusted)
- invoice 0bf90b
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- unlisted wallet · sanctioned
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 15 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 2bf39af0969a2556 · signed
- clock skew
- -1.3s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- b2466fa7be48e4d11f21633d7f9709479ee1d1ec9b8bd4dd10629dbeded0b9a2
- transaction
- e12cbcb8ad591871a17ab57e61b0196f0d9cf4010ed6ba2796ffcaa086bca8b0
the receipt
- entry
- 3623 of 8493
- previous entry
- d5128841a9d243f0e3d280dfac3052752b9378592294fdc549f8598ee2b1adf3
- leaf hash
- 651489c5f87ac0f2fbbee0846d7e0a643a265b5558097d6e603edc2e4b12c20d
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- kDv/wlnjqWIAjfbPxBAPtZ/Y4FlMIkcT92GRYzd+3Xc6dC4e6EN3em3VdVaai0tEtQkNZjHuunypXMF8AjsECQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root f740c5554c…798848
0leftd5128841a9d243f0e3…8ee2b1adf3
1left1d5d88bb3e9395c448…f9d3964465
2left9ad014cf1b04e1ca39…94b9e956c6
3rightc0858967605b4c923d…e1c0e198c4
4right369f5a937dab6f3414…32874097e2
5left3d39acb1b481c740e1…3abf1990dc
6right1920c419c843a1c9cc…0b9749c36c
7right0f3e15ecdf4ef9a1b5…aae3d3293d
8right65cf229241d209b91d…79f338c06b
9left1f8bece408d15a8047…f91777f0e3
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13right125c9dfda6b0bcd08e…fa1e82598f
root
f740c5554c29bb8916fb96ec83b29b1a30830fca1d2f12503726dd1abd798848