how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 107d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, -1.7s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 4184.9127976 USDC → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice f2bcf4
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 2d41c3fe1af706f5 · signed
- clock skew
- -1.7s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 0ff9cb5755a8d636f341b5dba72551f54d2b853468d500d44e6adbd79658a348
- transaction
- be8842dac9a47a620b3a4879a956fef72d48d7c404ee3b2e3b333c3ca17c0b5d
the receipt
- entry
- 4364 of 7448
- previous entry
- 39edc59664cbceb9947204797cac577e3e9a3a63182f4ba05135e922bcfa6fb5
- leaf hash
- 93b4d7ef925dc369b1fa00ad9aed61f17858149d879449d595e2e577c746bd9e
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- XelVOYiuACL47KCFsNnIni7paeeqScNzvD4cIBULG7JPw0B7PuKHqvuQhHv2deX1fDQ4DKgIXNbmJe13pZA8BQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 00bb58334d…d2678b
0right5aa2e1528d0539d653…ecfac63f31
1rightbde765882307175bdb…8fd2e6ebca
2left21d8f4847fffa04c20…195e0677c5
3leftb1c36595f19bf38eab…b0e22018a9
4right877e6e46086fa5c8bc…c6febdd49c
5right8886480615442dfcd5…e0a6805167
6right72e77bc2f167c1dd11…f57a72e312
7right4a9ccd582de0e03557…dbd405a0f3
8left4e4bc411d7266f864e…35a4b2046e
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right37fc32e3fc5f4cb4cb…e8afcf4f86
12leftdc8527842d65829ab0…fb53df942a
root
00bb58334d580d6ebb46a35101c7968413f8d02e8d502c9fb749c779a6d2678b