how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritympp-relay, 0.8s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAH5XK7C6S6F7ZRIPPSQSZSJ46QXPYZ42B6BJHHJ3ZSXYD2FBHMNFPPA
- operations
- 1
- op 0 · movement
- 82823.4693512 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 8002b2
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce c76dc50e73e37546 · signed
- clock skew
- 0.8s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- actor
- agt_cloud-spend_1ec0
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- 25ca9184e9c50e248d2f928cba803a6580a00dc6494005027748b0db561367c8
- transaction
- 94c6c04c1b80d39222bcd8ca29864a4e21c60e143d1f2f82a8c61ce58e74f51a
the receipt
- entry
- 3267 of 7490
- previous entry
- f73f3c2eb66c053b7c4748589540db245a2c217e54e7521910badd05693c42ae
- leaf hash
- 9f49dca911217dca4e5e2eebe6999bdfcd09a86660177645e5d94a2f6587cddf
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- goIN9jzsxjnYtniyJx++0oGBdvBEPq1t9NC4hSQE9AvmhjBvBy/7nET+BqprgiYJWcXBIeolAceqK0MptZkkCQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 963f6ddd75…4011d8
0leftf73f3c2eb66c053b7c…05693c42ae
1left919d4774b7bafe1f30…f711dd9bdf
2right3d2b903b789fcbea65…94d9d1ae8f
3right6f435bdd16ebfd465e…deb0f922ee
4rightd80e536ecc4baba053…8129242b0a
5rightea6934b52e98941d17…66bfc6c826
6left85278a15478dbad606…2d9fcff8fc
7leftd926bc491e658d0258…d92b5e3434
8right2a9459ab386a2a6911…2cfee0febb
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12rightd4c81e3ff0729fdd33…a7aa8e8fb7
root
963f6ddd7575eeb7a031d88825c92c62b925c1be36514eefcc9ac00bca4011d8