how it was scanned
01✕realityenvelope is not valid transaction xdr
02✓mandate scopeclear
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 0.8s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
decodeundecodable_envelope
envelope is not valid transaction xdr
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GB4OYDZTVAKAY3CX3NTLXUE5AZAI3PEE545U7PKEJM6WX35ZLRCXJFI4
- operations
- 0
- memo (not trusted)
- invoice 9ad421
- tool_call (not trusted)
- release_escrow(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 9864af62b059220b · signed
- clock skew
- 0.8s against a 60s replay window
- tool approved
- release_escrow · f9a055f3564d4214d5dc8d13…
- tool executing
- f9a055f3564d4214d5dc8d13… · unchanged
- policy commitment
- d3ef096bdabb7e3f168cca35…
provenance
- actor
- agt_ad-buyer_0829
- mandate
- courier float
- mandate hash
- 44b4f567358a7907d331809f81bd053a5bd1ff4adbe8b38d148368d6a597ce2b
- rule hash
- d3ef096bdabb7e3f168cca35e71b0ac1b4491cf3c712e418c538a779175ca4bb
- request hash
- 0d7dfb765c6ac44f045c4f8762d04fb4ee5cea3953d70822157524dd57bb8a11
- transaction
- — envelope never decoded —
the receipt
- entry
- 6902 of 7283
- previous entry
- 1c3a49d993653645cab9def34494ac8834b75291f6a44061fc9d8ec1c28f82e8
- leaf hash
- 771985c351e85d12eafdf754ba8da9c10cd222f27dca33eff4fbcb6636958bf5
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- WzyDEph0/YF7eSMwabkSS+gbGplQ3HIbgkCbuWsRJeR2nW5WQcy9AQt4nnTES0hNrogh4YUBUBwzY0YscJ+0CQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 6d5cb7986c…2cd0bc
0rightd11c00a27665f10ec7…d4dca88cfd
1leftd65ad79fc5ab3260eb…447242e623
2left65946ac1d20d20cc94…ec4c154e5b
3right9ec6cc07771670ab0a…b1294ec91c
4left3fd5b0157ba08f5236…ab92878e98
5left5cdc11b7ba46adbbe8…8c49f77ddf
6leftad4a66150e75485cfd…880872bd02
7leftdd24b7b0c365c182ba…ea9c29ac8b
8right2e9def86dd618400c6…2405603d8f
9left96c0eb2bff9c529bfd…5dcced0eb9
10rightfacb6e9d0dba8dd196…36edd88e84
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
6d5cb7986c24323cc86ed157aa3347e122ea044966f3b8df66f2d1fc472cd0bc