how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.2s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 4395.2473609 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice e52b5e
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce d7f4ac5da3fdbc92 · signed
- clock skew
- 1.2s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 07effce05ff1544a8c56bef458617650816b4e66d35b5abed4bcbaca997ae29b
- transaction
- e1b031cc3f9d0655bd9a031784a11935efb32ec175cb1d018be1ca5f22c4447d
the receipt
- entry
- 2726 of 8329
- previous entry
- 67f2bd99eaaad01ecf2b8f78f2490b0d8367410b5a54ec243126e8fc0ce15cb9
- leaf hash
- 8a036d1499b16dcf399db41fe18de3169fb7d3fd138fc6931b416be82a347144
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 4OSSnMMvJ0r+rqc9TE3OstoP+ae4+oiNZDnTc7AC+Y9wJZS9vOylPwChSPbH3J7Lf5W6C3NSe8/IADEVG28VBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 17cbec09e7…e741b9
0rightb0c4955558e3a426f7…b9d00077f7
1leftbd7277ad655f473bb4…22df232c0b
2leftdae9926c63235f1843…303d4ee1e0
3right2e89b57aadeaab104c…ba9d1d3d7e
4right138fe15c85e4099dde…51fea21928
5left759388bc4f95dc1c66…3b33d62f05
6right4222d2f25105ac5a70…9248e64a4c
7left7b23e2c4e24f966cea…5ab2de4da5
8rightbd4d9f0271ede98c3c…f686b62b8e
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13rightdc19d92933df38d093…6d077abcd9
root
17cbec09e7b09f4859a580c7d95f2cf7b19878d7bfe52abbc420ea1f60e741b9