how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 1441381.47, cap is 1031814.27
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, -1.2s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 1441381.47, cap is 1031814.27
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCJCW6F2LQNESISSOWIKYSG5OBLBQS6GAZ4W2K2TZLZ36UD43BKDBHYP
- operations
- 1
- op 0 · movement
- 1441381.4658343 XLM → GCTUINPFM5KIE6NGXUIBPBOOMF7O43WF4WJT4BKRDGZDSBEBT2TSGUSK
- memo (not trusted)
- invoice 6da2d6
- tool_call (not trusted)
- settle_invoice(vendor="harbor insurance")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- harbor insurance · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 0fead73f9d2b06fe · signed
- clock skew
- -1.2s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- 084ab10b75fc23496a0543d1db380a58e04150469df7b76744ef88d42aad7887
- transaction
- 7bbbee0c40c8a7ee483a804d6f1a76b60b1541fc9d951168e0b50e48d3326cf2
the receipt
- entry
- 5479 of 7446
- previous entry
- 13e230b48918cbbc92c7187776ae91dbf338dc98b250bef913268abd60f9a216
- leaf hash
- 9b1bb53399eef787d5a7036699641346e6386f80f873bd2c7cd01891bfc31c6f
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- tSfVl533kiOR1ApbwsGuf0Tk2Jh0EvTaQjQAVzXbxOcKYy/YR3RXm2mkwnbEbf9SMqPRf7viBFJQRNH2j8l2AQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 521b33d72c…eec67a
0left13e230b48918cbbc92…bd60f9a216
1lefte7abae4c9418b63214…fff29ae0d7
2leftc1c5a5fe9b084a2f75…6e0e5f57be
3right5ac0eefc18841c19e2…8bb3ea1687
4right08182cfc4c4a88a7c9…0626eaad85
5leftb69d613617bb68bd21…76b653fd9e
6leftafcb566836b649fed8…abf892bc18
7right5ef8d47092b4a9a9fc…9d71f7af8a
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right6f8a654b0adbb7ac40…21c659034c
12leftdc8527842d65829ab0…fb53df942a
root
521b33d72c4498e302ef01b501b1d16dcfcd9a6cdc594090d9bf54a698eec67a