how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integritysoroban-direct, -1.2s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBL237S35VIQXC2CW6HHDWY7E6OPK7DAY6GKOAY6HTA5OUKJQHXQSLNV
- operations
- 1
- op 0 · movement
- 11502.1163082 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice for s.patel@tidal.example
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce aafb844ea3c06735 · signed
- clock skew
- -1.2s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 3b1739f7afff79ee44cd65771037382bfe0b4b3010966be68d55c303b879674d
- transaction
- 61f12cb0159aed9848019ae00f975b235456f1b7fdea9741b7067fd9e23eb350
the receipt
- entry
- 4198 of 7339
- previous entry
- 8d438060cd659b78aba7d63e119232d5d081af4384380a259cb503292b4fa17d
- leaf hash
- 9be1bedab9ecc5cd464966c7bcc062a1c02baa2e0cec593f5a3a12ced82c054d
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- hiJJYamrsEsOCPMaZydGYYspOI7wHsKFN/wBL2OVGLCb47S7lLAOTOO5s95IgvmpO8DGbPmJ+Qw4pQ2IJIJlAg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 1b79317e14…264229
0right9b3f82a370cfa8ef1b…5d5451233e
1lefteea1e84f378af9391f…d931b3fe65
2left6b301e24ea4d8002a0…5330ad5570
3righte7e8fd40f76c0aae8c…a1b6cbb520
4righte934c5a9e1df07e98b…3cc8dcce1d
5lefte98fd6471936495d3f…e6899067b3
6left83062ead9128b5a9a3…7d30da1763
7right2c0f709ad6c0bf69b1…d98eddf66d
8rightc4ef35061cd7edaa58…68e4521d67
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right5d2f2466a50b051689…811733aabb
12leftdc8527842d65829ab0…fb53df942a
root
1b79317e148a866098842c647b8fa53cbf462bb4900e85b9a4429787d7264229