how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.2s skew, nonce fresh
07✓post approval integritybuy_capacity unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBFV2ZQVAGZFAUYXE2Z7UN4NY57Q4RX5VAZG67SFOR6D4CI5QWHRUH5J
- operations
- 1
- op 0 · movement
- 3560.7594172 USDC → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice 047780
- tool_call (not trusted)
- buy_capacity(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 56685eb46cfec35e · signed
- clock skew
- 1.2s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- f2aeef2496ad4a3dbfca4966ebdbef7fefc411ed1d65fc732c0bb19e7cd19d87
- transaction
- 2979beb1b35121416ef8aec1ae9ffaa4352064b7314967c6a73321353f0941b4
the receipt
- entry
- 3285 of 7448
- previous entry
- f29394aa5f113334ae0c51043d974c3aedf75142bc0a87091ae3143861f4f4f2
- leaf hash
- b2e671805dcb86003575c52f64710ad9033a06d160d0fe3811127bc207bb6985
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 2OMnA0gmRIVnq562GOfzXrRhtUBEkga8EAXp0tUCFhF5cskH54GC8n1R1HcHcn3VrGwMOxjRdJOC2CQ1hApoAQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 00bb58334d…d2678b
0leftf29394aa5f113334ae…3861f4f4f2
1rightee02b75ae490ce4385…5f64061ff9
2left23808fd561cc0f058f…a6a373e1cf
3rightcccfabd3caa949a6b1…b052ab0689
4left0c7db7ed8f7033ba3d…d00ea5d389
5rightea6934b52e98941d17…66bfc6c826
6left85278a15478dbad606…2d9fcff8fc
7leftd926bc491e658d0258…d92b5e3434
8right2a9459ab386a2a6911…2cfee0febb
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right4b3113991fd26fe5af…73332d3261
root
00bb58334d580d6ebb46a35101c7968413f8d02e8d502c9fb749c779a6d2678b