how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✕privacymemo carries an iban, and this field is written to a public ledger
06✓rail integritympp-relay, 1.5s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
why
data_leakiban_in_memo
memo carries an iban, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GDM7DWHXNMLJGUQLAWJDBBVHIO3A3IJ6EKPUWBGYAK6HHJI6EU3SIEJR
- operations
- 1
- op 0 · movement
- 82439.1568116 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- remit GB73NWBK2758720425921318
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 96919b64710ab448 · signed
- clock skew
- 1.5s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- 567e9acb0027078ce9ded529cbe61e88441fd2081a5082efcb83ca887dde9a6a
- transaction
- 5e2349ad7e35432e374a3122edc8ef5d135328bb81843cbd15bc86e4c29af09c
the receipt
- entry
- 4888 of 7604
- previous entry
- 4c30c61e267c6738d0c4ed41f54ce7befcf3cad6cbc6ff0fdc15aff4d533e2e3
- leaf hash
- 65ad94465977cb6b17c1231b2ee8cfefa0d5fd3f5cc7a3181d03dc0f2e56ba80
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- GLiAm/0IT/uZfwT4Jwxeri09ai1im7HicCkxcBVTpJ+w2aJjMeyosLCESPpozLc7g9cEI+yAZIYEg3ObdBnDDw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 7f48faf9ac…77a5ae
0rightec3e4853a6c95e4c86…c493a53b45
1rightc9bba1e28a85d11862…afd7f8f9c5
2right02b59dc96c67606288…69e50b77cb
3left75f6c73b3ed01f2565…00a46d94b6
4leftc1614ad44472f3687b…2e42649e00
5right82253ea4b470935227…c82e050c5b
6right2fe3cc9e573188b29b…cf19a9e990
7rightad1d35062277b6b212…913e82dc0e
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11rightc6557e1461a3101da5…bae3668d46
12leftdc8527842d65829ab0…fb53df942a
root
7f48faf9ac131b4838903b5197bd27a7eea2763697266e716bbe3d097377a5ae