how it was scanned
01✕realityenvelope is not valid transaction xdr
02✓mandate scopeclear
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, -1.1s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
decodeundecodable_envelope
envelope is not valid transaction xdr
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 0
- memo (not trusted)
- invoice b1708e
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce c5b8ee2da02d2450 · signed
- clock skew
- -1.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- ec162d0effb485287ad0614b4c9ee81bf6185e5239c538fd30ac8f97c0048882
- transaction
- — envelope never decoded —
the receipt
- entry
- 2944 of 7534
- previous entry
- cbf8d3b3e53b0fd9219bbd75b136bba57f420dd71e8a211c5a81a76a27cb79e3
- leaf hash
- b9bd1793b39c651fbea15bbb25fa77aa47744f78d893ef0dfac78a081805a4e6
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- mIJbrBfmZqabSRXSR8qeEz80MGCQVTC1nGZMt3RIYFdo67/XjgowBkcqiKPMxb2ZpIy4v+J8hX0AnzbPCv/YCw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 40b825aad5…0dbb3d
0right78063aa7d3f0182d35…d5697a7e7b
1right84356d46f5803dca14…fa9a25f540
2rightf6ef3a8b4a4fb5731d…9b1b98242b
3rightf2b85203acb4cf426d…eb2b2bfdd7
4right23eb54746b96857e39…d23ebf19dd
5right7c334a4c514de47407…a22940de92
6rightbd80346efbb8b3e89d…c74c53ed01
7leftf3970ea98dfaca3b80…5bf6b92584
8leftaab6f46529b6997a69…7c0dd61c4d
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right4d47b2482fe1df5f39…7a533c1e59
root
40b825aad5efe6c7344c1c4f017d54745d5a2ad18e5cb6394959adf86a0dbb3d