how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityhorizon-submit, 1.1s skew, nonce fresh
07✕post approval integritysettle_invoice was cf8afbea802e… at approval and is 8f43197af191… now
why
post_approval_integritytool_definition_changed
settle_invoice was cf8afbea802e… at approval and is 8f43197af191… now
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAXCO6DFTHAGOLOM6K3SOF72JFGLLL6W2IKZ4ICRBI4RIX36HIZZBOC4
- operations
- 1
- op 0 · movement
- 121063.6903049 XLM → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice 2f60c6
- tool_call (not trusted)
- settle_invoice(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce fae0ac36c4c93983 · signed
- clock skew
- 1.1s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- 8f43197af19176e06ed28124… · changed since approval
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- c6394b01414b31b65708c297ce32817da188dd032c1aff2afd2ce6928dceb9c3
- transaction
- 212cd92631d4c6362a0f775c98037c637dcbe33210046b42f2fd4cbaa9bb7daf
the receipt
- entry
- 4918 of 7402
- previous entry
- 866222e04ba1f2410cf661a5504e115b56a4f0dacd75f162957b7cff0c12814a
- leaf hash
- 82732ca3d5c6db1e56f57c8ee8bf53b351e82ce96b2b63f765a47fe9a69b4cdc
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- Td630gP3CFOhXI+AnRgp8apO83T0wxCjPV3xq1gPVX6U/4YFRcWRuPsFnVKUFVPB1N0LAGYKXsVTrQc9q+BHCQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 308aaf868d…afd4a1
0rightcd95e6369b3ba26215…f84ad4a2fa
1left22a15d012e7e33114c…8b6855a6d5
2left4c3660cb379b1674d9…b3d688536f
3right3945aa9e88ffa7990e…e8f3725102
4left87d5c165db10b558d5…915d127ffc
5left4a615a592cdb22c602…ff91388f84
6right2fe3cc9e573188b29b…cf19a9e990
7rightad1d35062277b6b212…913e82dc0e
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11rightd3c0bfb7876a95c9b4…a043cba499
12leftdc8527842d65829ab0…fb53df942a
root
308aaf868d3fbda789f304cf6cdbc613041b63a44b31595ac0fcd09d49afd4a1