how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✕privacymemo carries an iban, and this field is written to a public ledger
06✓rail integritysoroban-direct, 1.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leakiban_in_memo
memo carries an iban, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 3321.1493225 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- remit GB53NWBK1413586863317396
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce ce9bcb73d879dfc1 · signed
- clock skew
- 1.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 00d55362e65c67be5ef6887e03f3ada72b60a80c0d510ccb6410d6d4c7159f59
- transaction
- 21f563f7a4569797483f9d8e262cb7d89732206d3e4dd812b907a4f3279b3327
the receipt
- entry
- 2968 of 8556
- previous entry
- 3d3b9ab7831e4051ebc1a3f8f40f9daf044f7937a22cb3edf7b11624c6e4778d
- leaf hash
- b734568a96a646abc6a329d1c37857b4619a5788ef8b78e66ffa82c8259ffa03
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- rQChyq1cUWvTf6Gs/TP8EQKDlBD75IaDcyQV/unrXBH9/dYmoiGYksFUb4MwC0bKAqqj44UPv3nVOn+o+M8RDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root abcf1a764a…d86ba0
0rightda7c22b57abfcdad9b…589b32f61b
1right4a466a98f11817c5c3…aa0ca951dd
2right47feeee7e8f047aec7…d4bd293593
3left35c4e137ec7300311c…6cb3343a7e
4leftd8208871233859aa79…ec182f01e8
5right7c334a4c514de47407…a22940de92
6rightbd80346efbb8b3e89d…c74c53ed01
7leftf3970ea98dfaca3b80…5bf6b92584
8leftaab6f46529b6997a69…7c0dd61c4d
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13rightb0b8dceaf36e3fea81…7f5be7371f
root
abcf1a764aac287bc122466fb59c8fac5b89c029e5466f17e099a78914d86ba0