how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✕privacymemo carries a stellar secret seed, and this field is written to a public ledger
06✓rail integritysoroban-direct, -1.7s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leaksecret_key_in_annotation
memo carries a stellar secret seed, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBVRQDCFBZU4Z3ZR4UPAV23TRAODTXS5YXPO3VYO7EK2LK347WUOSLBU
- operations
- 1
- op 0 · movement
- 11249.7325518 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- payout key SXP7E5CSGP4HI2IN3RVJ34T77BPBHOIBWJBSG6KIJ5BYTYDM5SXL7C5K
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 18228f8207f53ed4 · signed
- clock skew
- -1.7s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_refund-desk_041f
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 4e0f43be5790b0856f95e06859cfb8598608f0d960f91861ed75efc567211a61
- transaction
- ad18c32957c4751cfe68b0cc193cb1390713a147c3a2f732068193415ca05394
the receipt
- entry
- 2805 of 8010
- previous entry
- 09a0a75875d60991e897780173ed3f08fbd3f5963783be6bcbcd7d554abd5870
- leaf hash
- 87ac26ec6042bd40bd3a4ba2d43a5c2043d1b4d72f2563d0da23304afe31e2f5
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 8AriNEDoMxoeiwaEZrCmQ41VPphAnrHZIxP/oatKObsoZF9W0o4mRMY87wIL7jx7ziL0WRezFs5a6YEZyujdDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root d6495c9674…5b9c70
0left09a0a75875d60991e8…554abd5870
1righte3a65e99142055e46d…f132ba294c
2leftddaf74f264a80b8401…e68cbbeb69
3right1b901f845d76b5d4f1…f3304ce4f3
4left8506a942f652cb8d88…ed25037e12
5left8600cbdacea7dfd99b…5ce7437a0f
6left4ffaa8506f56810eeb…23989a189d
7left7b23e2c4e24f966cea…5ab2de4da5
8rightbd4d9f0271ede98c3c…f686b62b8e
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12righte0d9b817377a55012a…b4cba53593
root
d6495c9674ce231f4c52a7d3e7ebef20351ccc15723335731b1a9005c65b9c70