how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 8092.9831600 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 57731a
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 4399c22a9b2cfc87 · signed
- clock skew
- 1.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- a38b6c775a27f26f7623e585be348ea3310274cdf3199c0c83e2caa5851998a8
- transaction
- 2af4573748e022cd12d42a8c5d4b971d3f87b4f56ae53f3bfc2f2b64dd19cbf7
the receipt
- entry
- 5527 of 7341
- previous entry
- 34f5a54a29056e77d440226fc019e000ff4f3e23e26cf391099f402728969e54
- leaf hash
- 7312492993d23b8f98946c79db85dd2934ec79d9fe3f8c499f1fc90be3dbec70
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 4Xy9vQYVY4ZnSS6xw8o+C0JJ2DkFDD5/jZsiy0Q1nr+VLNo32avz954TFGi+E3wIJbV8DbArtLBHEwCT3QALDQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 560bf0f5f0…bb115f
0left34f5a54a29056e77d4…2728969e54
1lefta7f231ad8d7aada8ca…5c25cd638e
2left7d66495169c08567bb…f6717d3151
3right5a5cf7af0ec089b9e5…56fb1ccb5b
4left48e7c4122087b2c07a…86b876b10e
5right3872afe61389897d78…09c3c3f892
6righte190dcbd679803e7aa…7b4289c505
7leftcf832b259177631891…51131d8cfd
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11rightb29c24f63a25899d26…21a3d78898
12leftdc8527842d65829ab0…fb53df942a
root
560bf0f5f0d62ad0ef633bf63bc60afaa05a4ddbd6378798bdf836e783bb115f