how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 117d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityx402, 1.5s skew, nonce fresh
07✕post approval integritypay_vendor was 4d1cb1714f0c… at approval and is f22da01297c6… now
why
post_approval_integritytool_definition_changed
pay_vendor was 4d1cb1714f0c… at approval and is f22da01297c6… now
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRHRTFEUU24FA65267Q7OP5FNSVGF54KGFUYR5ORXS7WVKYEVDYWLGM
- operations
- 1
- op 0 · movement
- 137.6757496 EURC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice 1aae60
- tool_call (not trusted)
- pay_vendor(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- x402 · as the mandate names
- envelope
- nonce 9981a77b9d8a72e3 · signed
- clock skew
- 1.5s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- f22da01297c6a7b6e01a24a7… · changed since approval
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- 100d50a454d7dd328444a240872493a634215c073ce1f4c2a48492e4696263be
- transaction
- c8a08e73163d5dc99690d78509a3a89a57b3b93076a77e833c2245db148131bd
the receipt
- entry
- 5018 of 7645
- previous entry
- 4b34f44725810865a635613012eacea0aa1e3975b0f5b1e1f6f8c58170d98a75
- leaf hash
- 8c22b9d6e69d08ebe5bf344b146b53411b3f3d588cde760f18500cb2adcad198
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- h373mmCqPLYQKRRTfacTto6bCkohgjU870NU1PqhLtQxdHNWcbaprC0OjonryCYOoCAZWzDeSv1P6KDchTlIDQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 258147d13e…225898
0right8da618858713b2a856…cc8c482b48
1leftf1fd8a9cdded92c214…3fca5b37a4
2rightdd77880dd9b1c880ff…eebc6690e5
3left4e6c52711122961158…12d02e2ece
4left2c5565ae155ddb5814…12360a8502
5right8c08b22b55b9c630b2…9341a350ae
6right8133322a542e4bc11e…ee68e3ceeb
7left79f7450aea35c41d62…5e9e49deb3
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right294254bdff308e7832…d96271ae26
12leftdc8527842d65829ab0…fb53df942a
root
258147d13e5405d6cf26da1e3e9de0543b80e6c1435ff51be406f7156d225898