how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 287d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integritysoroban-direct, -0.8s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 2430.9965734 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- memo (not trusted)
- invoice for j.okafor@ferry.example
- tool_call (not trusted)
- settle_invoice(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 062080e26bfa7cf1 · signed
- clock skew
- -0.8s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 7c063c96d77d02d377f3fad1042428aa62f69a3319ab4fcb3f8483148e2847e7
- transaction
- 3154bfa2276426aaed33fa4307b109d64aa6bb07153f5914198e5f7c9f9bf53e
the receipt
- entry
- 4648 of 7537
- previous entry
- ec4980cc51944988983534313e14903708a5baff79687524437bd9341536597e
- leaf hash
- b632d775df2949a320fc2d5d4d723ab9874ed3dd85170101b01744f5868f894a
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- OcVVwGeq4wWa6RERoQOvGBArR8j7sPBh4tuinP28/X1j08po7tkga/4DQUxVbbNSSfIxI3uYI9s4DlbSbQ/jAQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 78a21013e2…107a64
0right50329073e81d81cc4c…7916e7a8f5
1rightb605af5d255732c806…6a06f1ecb7
2righte7d2c282d3f54055b4…d98265108e
3left94e5e71eda792e9318…36855fc544
4righta61e344d9b409e924f…07fab9212e
5left6c5f4b88bf2dce32cf…3634650a07
6righte5ec36868de08557b2…1039225049
7rightcc9a222bfb3ac40cc5…dd0cf81745
8rightf4014cf557446bb624…43642a4211
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right260b2d895dedbc4ea8…dee97bf19a
12leftdc8527842d65829ab0…fb53df942a
root
78a21013e2a1b95a92ea0411a2c7f71f6f641dd8e0290b3d6091caecb9107a64