how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 287d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integritysoroban-direct, -0.6s skew, nonce fresh
07✓post approval integritybuy_capacity unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GDSPNKK5N65L5URZX46SJE2YBD4T5ZPFLDSVTWQIJSIXS436CYWF4IFL
- operations
- 1
- op 0 · movement
- 7613.1130078 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- memo (not trusted)
- invoice for m.chen@ferry.example
- tool_call (not trusted)
- buy_capacity(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce d4fb7bdbd2193128 · signed
- clock skew
- -0.6s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- 3058fbf2c2be28b1849848046c0e0651543da64e8eb2d5833cc74a53ffd1f876
- transaction
- f13bdf3b769c7793c864665bb9fda8a9129655fd38f652e6a3644fb83061798c
the receipt
- entry
- 7213 of 7344
- previous entry
- ac44502bf0b41807281112110d2c2785967cc078567708e1a2050b013c995182
- leaf hash
- 7c872a3adf38441f962110f62327da080597fd151431271477d96f2d34bd2767
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- +AOf8pUb3MSN55+puu3v0FPwBSHc+rLYqIFiKTM/FXqAM3sSDhxaagG7aERFcGcFxtWNqMsYDFPccvgKNUkUCg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 68a7a84721…c2ddcc
0leftac44502bf0b4180728…013c995182
1right184fd4b95dd013aa76…b1fd52fd38
2left23d4799d4949436cb7…a9c89c0b23
3left04888a0c66a81b4a90…e307123707
4rightc1f967979584d53295…6bcb1cd0dc
5left8e2bb4a9595f284b99…8829a324ae
6right7f7cf7e9de0403bed3…2e9bf65cc8
7rightb77529c881102adf94…8fa7f5f1b8
8left48b90477dd015bba52…ce0d79dfde
9left4043c82f03366d541c…af7a3fd4fe
10leftdc8527842d65829ab0…fb53df942a
root
68a7a84721d316cd7f6ba44f1a213f10c9288673a9fe2084f084bf0465c2ddcc