how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays GCRSA7IC6UFSY76HILBEE62FJEJ6JGVFHZC3T3HR5YOSLIXWTCXFAHV7, which is not in the allowlist
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritympp-relay, -1.6s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandatedestination_not_allowed
op 0 pays GCRSA7IC6UFSY76HILBEE62FJEJ6JGVFHZC3T3HR5YOSLIXWTCXFAHV7, which is not in the allowlist
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GB53TML6EYC4CISOPMWAYG33FMSG5MFTHOVGYVLY5M7UCCM5RLMYBNXF
- operations
- 1
- op 0 · movement
- 47728.7381556 XLM → GCRSA7IC6UFSY76HILBEE62FJEJ6JGVFHZC3T3HR5YOSLIXWTCXFAHV7
- memo (not trusted)
- invoice 0e1c49
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- bridge relay · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 19 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 088d10e386087a2d · signed
- clock skew
- -1.6s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- 84c518cad1f8591a0e4d703baf962e5638305f6c649ba5a928fe246210d1d328
- transaction
- 6ecbbc612ac67408223a70208beb4e146299eac79abc816717fc0a1f53ff5737
the receipt
- entry
- 4911 of 7445
- previous entry
- a15768f140b49f2196debca43c2e74aaf34fe63a44b0b03cd903a3545b1bf983
- leaf hash
- 8bbb4acfdffc05d8407efff47206a2e75392f56da057eaff815af860e6710c6f
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- pwSMJV5yW4Ta0VLtTGcZL/BxmQrXy4ibVsQ1EDZ2BXBcutND2OVRELvgSwV8DU7CO5H9Vzdn970Q2GuBXXg1DQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 45e7fd66f0…4fe1dc
0lefta15768f140b49f2196…545b1bf983
1lefte596da66f5845a11eb…14fb91d05f
2left25b6ed3552ee5b2aad…2769b2040e
3left9fdad9edc0bd86eeac…6eb5580830
4right369010d729d0c97e43…8d17572238
5left4a615a592cdb22c602…ff91388f84
6right2fe3cc9e573188b29b…cf19a9e990
7rightad1d35062277b6b212…913e82dc0e
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right02a27acd0a1ea6e65d…5fcca5a4de
12leftdc8527842d65829ab0…fb53df942a
root
45e7fd66f0cbf02d4f9f4c54c8e3bbd9fb3261b7274808e9b3a5b8c8b94fe1dc