how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays GACFFMCP5SG3AEMOK7NRTFHXRCPMI2HVYZFPQG35DZBGLH5VEVQ2FFUX, which is not in the allowlist
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, -0.3s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandatedestination_not_allowed
op 0 pays GACFFMCP5SG3AEMOK7NRTFHXRCPMI2HVYZFPQG35DZBGLH5VEVQ2FFUX, which is not in the allowlist
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCK2IIIS5G3SIUJPTSSJIC5CSUMLTWZ737DSQTB2KJR63I5XJD47YFOJ
- operations
- 1
- op 0 · movement
- 82691.3323729 XLM → GACFFMCP5SG3AEMOK7NRTFHXRCPMI2HVYZFPQG35DZBGLH5VEVQ2FFUX
- memo (not trusted)
- invoice 0f9780
- tool_call (not trusted)
- settle_invoice(vendor="harbor insurance")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- beacon staffing · sanctioned
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 58 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 22e8336f101fb9cd · signed
- clock skew
- -0.3s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- 1a4975504bb3e5a7bf4894444b0f034852fa34dfd456607e7e28db32ff1f9d39
- transaction
- febd11bfddb202bfb33baae428255dc1708953674a952eaf894d99ac03defb83
the receipt
- entry
- 4239 of 7762
- previous entry
- ca39357bcaf30e566b0a45a7ef71576a7a0818b07b859940c41fb9405724fa5f
- leaf hash
- 74583c71132f38bff9f983ee6d11cd7176293489deada5a19de62751dc41cd03
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- recM0OFNCVBFUAtpPtmmyaTR4EkNZeh4G9rMvA1nAGtQ2/AtUJ/Eyh9OEJRr6vvXKFUpSJSXOy3AMfPcrdFgDw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 94f90cd95a…ce05e4
0leftca39357bcaf30e566b…405724fa5f
1leftcdf3827c0220ce2332…6e3c39cddc
2left2fb7f740663058dfaf…196bb2ca31
3left09effeafe984e26ce7…5a1d9b362e
4right1d2b6deb19d4f1896f…f14d2ab674
5right81190403dcf9a85c34…eb8ef5bc3d
6right1b4d02f8dbba2cefa4…2282a4182f
7lefta9096948f77ef5d4e1…51cdb1d2cc
8rightc4ef35061cd7edaa58…68e4521d67
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11rightecd5a42f221dc31f81…3da5f47637
12leftdc8527842d65829ab0…fb53df942a
root
94f90cd95ae4b521f2761c5e5427fef53271a0b88e6745703d375f2a16ce05e4