how it was scanned
01✕realityenvelope is not valid transaction xdr
02✓mandate scopeclear
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, -0.3s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
decodeundecodable_envelope
envelope is not valid transaction xdr
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCA6VTDMZLVGQWWEUDYCOLXXEGXMYX4UKUEOBD7ARKK4FUHZCUCS44VH
- operations
- 0
- memo (not trusted)
- invoice 91ed55
- tool_call (not trusted)
- release_escrow(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 734a8f48fac2f4ec · signed
- clock skew
- -0.3s against a 60s replay window
- tool approved
- release_escrow · f9a055f3564d4214d5dc8d13…
- tool executing
- f9a055f3564d4214d5dc8d13… · unchanged
- policy commitment
- d3ef096bdabb7e3f168cca35…
provenance
- actor
- agt_cloud-spend_06f8
- mandate
- courier float
- mandate hash
- 44b4f567358a7907d331809f81bd053a5bd1ff4adbe8b38d148368d6a597ce2b
- rule hash
- d3ef096bdabb7e3f168cca35e71b0ac1b4491cf3c712e418c538a779175ca4bb
- request hash
- 17f331aff4a36c7c7d11b7bb267f2f90f464e3ebb08324808486b622fdbeb33b
- transaction
- — envelope never decoded —
the receipt
- entry
- 2962 of 8288
- previous entry
- 2b3da7164e1851b42b32d63fcb1767d1f5c55a3551833a992642f2b4b2838559
- leaf hash
- ad9b735d040bc40435ea8e320c1462ccc9eaf401c0968f0d5a420f6a3fa3ba85
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- LyTLrk0XtkZitbe5V3PeeSw7n0bSu6YEfg2ARlFe515PoamRaJUp2BAJpuIVSUV6VRdmaObPqjbvPwoJ9ahKCg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 8c730560c5…e5440e
0right8f0ca5bd2126b336c6…4a39773b98
1leftdfaf0149ea4faddfd0…6e2122eb03
2right7517606dfe2ed5eb9d…751d2439be
3right292dd82e33fcd5b3b8…71e99e0882
4leftd8208871233859aa79…ec182f01e8
5right7c334a4c514de47407…a22940de92
6rightbd80346efbb8b3e89d…c74c53ed01
7leftf3970ea98dfaca3b80…5bf6b92584
8leftaab6f46529b6997a69…7c0dd61c4d
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13right3d3f59f756ce6c6290…e3d60f02b2
root
8c730560c52f4c61362d49317800720d634964638a0cc3803b7b09784ee5440e