how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 5036.48, cap is 2293.58
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityx402, -0.1s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 5036.48, cap is 2293.58
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRZS2ZL3LLC53TYDDK5J2U7KU6BIK5E42WCDPNRJYH2JBFQ3WUZZCHD
- operations
- 1
- op 0 · movement
- 5036.4821094 EURC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice 7d56f4
- tool_call (not trusted)
- pay_vendor(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- x402 · as the mandate names
- envelope
- nonce 65edf70848e5d7fa · signed
- clock skew
- -0.1s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- 4d1cb1714f0c4847781cf5a7… · unchanged
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- 43a1eae013b75daa73b321b20f161c4fcd4938708e8a83413b28fedf92e5623b
- transaction
- 83f472be2b2c266c5c562fa2def4f595a7d1b660f590fb68f408ca287abd026c
the receipt
- entry
- 4834 of 7403
- previous entry
- d0fb96b811481403c4bf748d02ed3172256245e5f93192ae5203fafcfca97aaa
- leaf hash
- b0c59a7a50505b1876b64c19fbd6fdcf23c252d461fd95c8002a5f756d684ab8
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- Z905ROGAjxc86Tx7+23La3LLox7erbKNg17ICzmMgISuqWEa3heLXrlvTHs577rsLjG3O51jCDYd5t5v0HneAg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root aa7beee6a2…fdc67e
0righte8ecf356f94c46fc4a…6dcd959555
1left6342b6693bb7ad24df…79046ab122
2rightf5deb031a279a4e8ab…63e2fd4ffd
3rightacda8860d5f63364c1…77337191ba
4right9f3265caecde8f7bb5…d5eb26a21e
5left6024af3aaa5068adf1…93537bb180
6left8e0f7cfd5823fe2e22…422736987e
7left8ff71191901628c93a…62d334e864
8rightf4014cf557446bb624…43642a4211
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right0a030a216cac3b8e8b…93bd2e19c0
12leftdc8527842d65829ab0…fb53df942a
root
aa7beee6a23cfffb103ba3dd25c2aa580ed55951f24bc222aa6f0b7056fdc67e