how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopemandate issuer is not in the trusted set
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, -1.6s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandate_authenticitymandate_issuer_untrusted
mandate issuer is not in the trusted set
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 7565.1446198 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 45e5cb
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce c05a3a4d833ca970 · signed
- clock skew
- -1.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 18473970fc9c213db2315d2174a053b64864c95271f4eee04f56d0d1f3303e3a
- transaction
- 8c3aa5efd2e6f72c898771a2a8720ef83ddee90ed183c94505534f45b07d5402
the receipt
- entry
- 2440 of 8458
- previous entry
- 50dd54d7ec6109a104e7d24ca94501934e1754cf93970be15fc76885c12fb746
- leaf hash
- 9909e5316c8c88d59f727a02653d4ca4bc35acb65169ab879776efc4a84599a2
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- fCttAgWwTY5kobReP/DT7Dwioy0AQfxUSMLa2knJk/EbMmZtkv3ojTAFQ0QADHgZWwd08RA2uUPVPpOutf6jDQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 69a70c0d0c…ce5e15
0right5fd10107fb0f31ad08…0afcf5dfe5
1right874b01c5127b4c0f04…1dfd44eb80
2right410bba50a31ac06794…97f3a59363
3left4822df2759d1b24bab…788782ae5e
4right016b70c44a25fcd362…4cf03f157d
5rightc435901c389cdcb842…42cdfb8379
6right1dbd9a427cbfd212d6…4aa400fe1a
7left72ef2d9386f1e7eb75…05d567c848
8leftaabda09cb1f348fd11…e260f45846
9righte799ad94e5ec8f5b18…1eb984ac76
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13right1edf1dc099dbe38fd8…968e12f90f
root
69a70c0d0cfd9a404477df31f98e569d048330fe4d4d543a5d052b4880ce5e15