how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, -1.1s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 5983.4471190 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice cbd19e
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 9bd6eb072dd49f68 · signed
- clock skew
- -1.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 9f9a62205c5c6b160430a6b0243a5112494250e696ffdb00b27e013622f3e493
- transaction
- 602f86f94f96f972adf3e79f4cf00e699fcb38a812c1dc7c153990588563bcae
the receipt
- entry
- 4504 of 7709
- previous entry
- 3474b5a8378f83162bfc0958c8d5fdbe221ac812ca98f1b307e201a7b137ffc5
- leaf hash
- aed28cbb2a02bb3402ebb20886ab9896ad3847e2a34d20ce48a7573f79533401
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 23le3WOeRUlm7M2DK0XfqAMC8Dz01zWpumiiNnBvvlPfzLACCP5GbXvkgcqw0zw2DBLhlIeGfs43qtforU1kAA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root d77ac1ea3f…d5c0c0
0righte9a6accb889b43fd04…3df7a302fe
1right3faaf132d8a11abfa7…bbc384d601
2right482467c5df3646aa30…fb020a991f
3left716344dd74071a9b3d…b489a3bb65
4left879fcf782bcdf0e6e8…11b32176eb
5rightd8f8a5afb4190ba059…3c141ab3c1
6rightd456a5c0d740f5e1c1…f1846a5dce
7leftdaee7ac1aefaa3c4ee…1a78985402
8left4e4bc411d7266f864e…35a4b2046e
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right5798efc740cd5555c2…25800332de
12leftdc8527842d65829ab0…fb53df942a
root
d77ac1ea3f63743d7d2449cf3ce676ae92081e8c6abee0c97008fcf1e3d5c0c0