how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 117d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityx402, -1.8s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRHRTFEUU24FA65267Q7OP5FNSVGF54KGFUYR5ORXS7WVKYEVDYWLGM
- operations
- 1
- op 0 · movement
- 424.6933205 EURC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice 267a45
- tool_call (not trusted)
- pay_vendor(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- x402 · as the mandate names
- envelope
- nonce 30d04775725f177d · signed
- clock skew
- -1.8s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- 4d1cb1714f0c4847781cf5a7… · unchanged
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- c6a82a00d5aeb37a7d7ff457a382d9abd16037d59837f8a8c003f42f81d98e85
- transaction
- cd50d5a3462a307cd11bac62ae53de44be3ecfe785e5508adaff0438852f11f1
the receipt
- entry
- 3433 of 7860
- previous entry
- 675e0c1eaf6ed4d6f0314461ee97b9b1b14b2bfcbc7c0eacb89a2782565a96c7
- leaf hash
- a695aa7763563f7266a610b07de46733558ba54dc0f19636550e2c265965301e
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- v9SP6hqDFuyUMd5lWRSE2K/Yyvm3LxPgdrJFVsnSE10rQrv4kl3L31YR7bKnglU+/xQkKne/iWX108OHBBX0Bw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 24a9f2d0fd…3c4f49
0left675e0c1eaf6ed4d6f0…82565a96c7
1right65e244cfbb8723a09b…a71ea70834
2rightdcc682eef4a73f590b…1ea104ddc9
3left61edde8c1660bcee73…28f8a031f7
4right22704a1457f6799eb8…5bb884bccd
5left0f73974e9ba14db008…1d7d4f6b4b
6left3320dbdfdadb25bdd4…6c3cfa8f01
7right29271aca6ed696ca35…d4f5bb8ea7
8left1688c1e4a32a5083fd…4b7c26e6dc
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12rightc9a528e80192ca6b53…ba3cdbd3a8
root
24a9f2d0fd3054005f69af3731f9180a0d3c6b84c9478f119747f5ad443c4f49