how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays MAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7AAAAAAAAAAAAAAAAAAAAA, which is not in the allowlist
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, -0.6s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandatedestination_not_allowed
op 0 pays MAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7AAAAAAAAAAAAAAAAAAAAA, which is not in the allowlist
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAXCO6DFTHAGOLOM6K3SOF72JFGLLL6W2IKZ4ICRBI4RIX36HIZZBOC4
- operations
- 1
- op 0 · movement
- 167085.2734024 XLM → MAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7AAAAAAAAAAAAAAAAAAAAA
- memo (not trusted)
- invoice 896944
- tool_call (not trusted)
- settle_invoice(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 1d24a615b47c2ebc · signed
- clock skew
- -0.6s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- a170ad49f1e336a49c2430121955029a5ae96de1d860370e44d46475cfc6cea4
- transaction
- 4fd36af0610d60de39eb94bba9f9fd0deeb0c7846937e2105ea69151678c82fa
the receipt
- entry
- 7137 of 7194
- previous entry
- ffe05d065a299ae977d690bee4034937622c878ed6f3b0abe6651c7a94dcff3d
- leaf hash
- 8112e1fb79090bdc8bbf7775557eb590377ed2f998593fa679917c1b05befd05
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 0UAX8wq31bB8a5AAG9m00UCPkhrcmh47BoefGZs+hPP1hIDxG6BpREXqCRtJGbsazkDW7ev1SvSAfdkUcJcuBA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 1c013b1a5e…13db71
0leftffe05d065a299ae977…7a94dcff3d
1rightd835e6007abb66ae71…73a1c4c7be
2right28241709dce5a8ddbe…1cfa0398d6
3right60c0c6ad18a3857950…8165c01b22
4right1017901bad67d80313…1ca203e9a4
5left30c652e452ec934665…9d5b0f21e0
6left53fe1f5009008a623d…70bbd46abf
7left24508aa536d103d423…3bc3fa6d40
8lefta0356918a6f5923350…e4181e325c
9left96c0eb2bff9c529bfd…5dcced0eb9
10righta02efe88ee7d2ac58a…43515a44f5
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
1c013b1a5e2707ce13138861448d0e87e7871e8549a84727aa760ed78d13db71