how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeagt_invoice-runner_ea65 is not among the agents this mandate names
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, -0.7s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
actor_authenticityactor_not_authorized
agt_invoice-runner_ea65 is not among the agents this mandate names
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCJCW6F2LQNESISSOWIKYSG5OBLBQS6GAZ4W2K2TZLZ36UD43BKDBHYP
- operations
- 1
- op 0 · movement
- 170811.3840765 XLM → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice 7db3ed
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce adf08b30daa40418 · signed
- clock skew
- -0.7s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- ba42c939365b4794fb1acad669237732da54298292ae29934ac1a48d7b707590
- transaction
- d88e68683c23b0c88c3c64368ed165b7d18c34675b6543ba042e7b8c9901eead
the receipt
- entry
- 3171 of 7793
- previous entry
- a1587de441270df3993b565288dbe460d88143b883d879516f1c1c92f68d595e
- leaf hash
- a560e55084f63eea77e6ed6c41cde019313856ca1a67cf1059bfbfa28650f490
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 6V35wfDt3IDUtrdWzJYJbuS9tElEPql1V4MyzHojZ2S+iUAjdtbB9i4byzI3OAVEiTVCAJsfPqk3sXW7BhTwBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root e9edd0cb49…ff91d0
0lefta1587de441270df399…92f68d595e
1left4194acc6dec6e7e5a1…b1542b0584
2right03a86e869e1442eda6…114d67c900
3right4d805dba40972135a7…6f445bc0ce
4righta009d3c1aad11e6605…98b5fe7cb5
5left21344bfff6394b623e…735386cb93
6leftc773645ed9fec69e7b…9b0a2fa719
7rightb301653ed33d37c64f…649ddab9bf
8right2a9459ab386a2a6911…2cfee0febb
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right70c09b213c893d8197…77eabfca43
root
e9edd0cb497c6d577994c6ddcf804885e27cc97b47f86935fbfe5d6d5eff91d0