how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays GDRXQ4YE2KP4XEQNCVJMMJHLT3CHQJHITTFFBOUW2ARSEQW6GDJHEWS5, which is not in the allowlist
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritympp-relay, 1.5s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandatedestination_not_allowed
op 0 pays GDRXQ4YE2KP4XEQNCVJMMJHLT3CHQJHITTFFBOUW2ARSEQW6GDJHEWS5, which is not in the allowlist
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GB53TML6EYC4CISOPMWAYG33FMSG5MFTHOVGYVLY5M7UCCM5RLMYBNXF
- operations
- 1
- op 0 · movement
- 27074.2515502 XLM → GDRXQ4YE2KP4XEQNCVJMMJHLT3CHQJHITTFFBOUW2ARSEQW6GDJHEWS5
- memo (not trusted)
- invoice d7f52f
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pallet & crate co · watch
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 43 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce d415e80be1bd4319 · signed
- clock skew
- 1.5s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- 20e893d95aedb445862c4784bd4b4eae9360703c1fd50366ad9a12420fdc576c
- transaction
- 15719a3066f4ee0d11563e4cac4614dec0766e409b99af427528307d0d5dc364
the receipt
- entry
- 3560 of 8564
- previous entry
- 10ff0b3f06b220b8f30b3ec2e91f8bf880fb439ebb15418bad178d70bea75315
- leaf hash
- a4c57b0883cfc4a087476d4da33ea880e6ed30de86ed1ff0b2e2bc372e371252
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- mSqx0cJlTc6SYkgqkQ+bivGKVk+W35NyB9I7ssQiW2+RfhzPiLIHdDOhcVMmBwry8b1rjhcb1o/Xfp1vcBEWBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 9096b38060…095a63
0right071c75debcc1e5abbb…52655858f5
1rightbd4ec1cc57c0450815…ded871efbe
2right83689701a2244d29b8…29d3ba9317
3leftbff4d4dfb29e661dba…a968b22c99
4right283fd17db14bdc0378…df11b617b9
5leftdfc5152f4511ad531d…2e9a0c683e
6left3fdf2bf1359a9e75fb…d92ac8df24
7left8bda8489d0293bcd8a…82a2436f94
8left1688c1e4a32a5083fd…4b7c26e6dc
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13right36745f8c185e9fe64b…c3f19b24ef
root
9096b380608077ffec4cf68cd324afda3e430a476112a7a15d989acedb095a63