how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 107995.80, cap is 50000.00
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, -0.1s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 107995.80, cap is 50000.00
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBVRQDCFBZU4Z3ZR4UPAV23TRAODTXS5YXPO3VYO7EK2LK347WUOSLBU
- operations
- 1
- op 0 · movement
- 107995.8047951 USDC → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice e73b4d
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce a01db2210b1125b1 · signed
- clock skew
- -0.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_refund-desk_041f
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- d658984b067d139943e9c1d928be00034a2ad0bd8505e6e5bee9578c6aa8d8dc
- transaction
- b75529fa8a82f6bbb183e7d429e6eaa4d2e77935c7bf70a815242ffb423a3b30
the receipt
- entry
- 3234 of 7908
- previous entry
- 2bcafe429295f41fce7f900ad0af75f2550ede0c49a79a572db7b25cc190f1eb
- leaf hash
- 77b502220885dc927ef30e376024148c819de0787811f41bff90e3900f3a783d
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- BTidLU/eOVYEzv2mMnxuyaqHea0lsMKV2Y4l1+D+R32XDCfcO9uOJvFRm/GUffjTaImsRZQwqPoR41Tv0HEKAQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root d0358c6229…698bea
0right2cfb2422eca733d459…7a6963777e
1left33d490abda12f0af63…003b539482
2rightc87f3746bc28500de0…71de33f1c9
3right8af153d2f4e09a06ed…7e0336d3ab
4right8824c9e19320092885…16b5e221a1
5left01c63c7476b8912096…ee4e3f935c
6right4da08019aaff533db7…bd04e3a0fa
7leftd926bc491e658d0258…d92b5e3434
8right2a9459ab386a2a6911…2cfee0febb
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12rightec1f5f7d5e943c662b…8e307a4f22
root
d0358c62292553509915e3e63119547dd3e741999a6e85e96728436a6a698bea