how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 0.5s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 4480.5343600 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice ec0cb1
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 1ef3eec7c54c6c55 · signed
- clock skew
- 0.5s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- b7abc5be467f2d6242d864e5480b49bb0feb710cfa657afded6be7f7b83b87f0
- transaction
- 9b5d96401fc749291dc44eb0e4eea8fdbf0d8dbb006f2235f8193a994aec73db
the receipt
- entry
- 5042 of 7411
- previous entry
- 707904b125e6aa3f426e9a6df7a0e622258340e890323a2bdda43da108e6d3e6
- leaf hash
- 8c681643cef754df7cd550b072566847cd365d50e0e594046fc81023be195616
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- bnfOW/htFNHp3oJsHB4DIjsM8+dh0YszHtX+QJJRduiA0AgtSRIDfKRKB2s4FUqVnp/n17sQzmmqsyGJTGqaCQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 3cf8d092d3…6f96b0
0right4ce4659dce929b6f82…3887ff3c56
1lefte5c2cbb5a60446edc5…dc93b6ad27
2right32f681379fb96a6860…b39dcdd348
3right96ca0b460fc5a884c0…afc2ee387f
4lefta96c96e1cd9ba3b1ab…1a1635160d
5left1b5c1da8b75fea68cb…40c7befb1e
6right8133322a542e4bc11e…ee68e3ceeb
7left79f7450aea35c41d62…5e9e49deb3
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right145dfd2d4b928e4263…c4f9a6a7df
12leftdc8527842d65829ab0…fb53df942a
root
3cf8d092d3e2ffc8abd2ab26c8eaecb767bc22ccdcd20d476f7c5250e46f96b0