how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays GDKNRTWH46MFLOV7552OBYES23WWEQ4QTXX3BXT6JMFAW6UVKTWI4YPT, which is not in the allowlist
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 0.1s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandatedestination_not_allowed
op 0 pays GDKNRTWH46MFLOV7552OBYES23WWEQ4QTXX3BXT6JMFAW6UVKTWI4YPT, which is not in the allowlist
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAO7VSWNNZZQWYUNNSUJXO6FWEHC5VLUGDWAEOOWG5DRYYY56Q2Q52LZ
- operations
- 1
- op 0 · movement
- 4490.5699961 USDC → GDKNRTWH46MFLOV7552OBYES23WWEQ4QTXX3BXT6JMFAW6UVKTWI4YPT
- memo (not trusted)
- invoice b9a5ff
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- unlisted wallet · sanctioned
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 15 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce f8e14b37042f068d · signed
- clock skew
- 0.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- cf0202d4af967b333a9a8012c81ff3f99d27f4a4101cbbd55043f0bbb1ea6b88
- transaction
- 7c82f36c2b738b1e7837e9be37ba422b5ec6527476bf90c2e5899d55458eed72
the receipt
- entry
- 2975 of 8866
- previous entry
- d5365cfc43746e27ab388393d9668e82ea433dfc094de66512a91ed14685cbbb
- leaf hash
- 66112727c958199708e93902932785476db6adf38a4c5867e96690eb84766700
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- lnrQH3Ah/XS933wLuSu4s7SFPmmea/pmdUQ5Q0pIRugOJcHho1wEz/ds1KhfWUJpJFuiQCEvX2aCQGZ3ftHnBA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 719381b133…ac0f60
0leftd5365cfc43746e27ab…d14685cbbb
1lefta82f081a70cc8830f9…605259786f
2leftb99312f75b43384db3…fe2e5f3abb
3left35c4e137ec7300311c…6cb3343a7e
4leftd8208871233859aa79…ec182f01e8
5right7c334a4c514de47407…a22940de92
6rightbd80346efbb8b3e89d…c74c53ed01
7leftf3970ea98dfaca3b80…5bf6b92584
8leftaab6f46529b6997a69…7c0dd61c4d
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13right4ea213c1cb5481420b…373f426a30
root
719381b1339eae489a41f2a2dec17964673f222b3320e8dc2cc9db9922ac0f60