how it was scanned
01✕realityexpected exactly 1 movement, found 4
02✓mandate scopeclear
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 0.1s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
realitymultiple_operations
expected exactly 1 movement, found 4
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBFV2ZQVAGZFAUYXE2Z7UN4NY57Q4RX5VAZG67SFOR6D4CI5QWHRUH5J
- operations
- 4
- op 0 · movement
- 2741.9105220 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- op 1 · movement
- 685.4776305 USDC → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- op 2 · movement
- 685.4776305 USDC → GA4RCTAG47K3XJVRNUTAT2EWW3IKTAEMOYEIFEFC7HDPNQJ7RJMMZQKD
- op 3 · movement
- 685.4776305 USDC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice 6afcde
- tool_call (not trusted)
- buy_capacity(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 3d1024506e96ceb5 · signed
- clock skew
- 0.1s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- 81072582f7d608a5aa95f78c186f29ae301c888e4f79f4e88c77cf4e0be5bc0c
- transaction
- dacd1e30dadea486e6b132811f401faf820a5228dbc09bbe7ec0afae3ee0382e
the receipt
- entry
- 3437 of 7925
- previous entry
- 387d591eea6b52f535296e4df72ec4e2b8a1e8af261bea768f74bb9dd8e685d0
- leaf hash
- baeb31dbec17fc2b514a8b727c43aec4de7972100f26a957fe4e89b7c6aadad1
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 6LJhZFeESzh0AzJUDNNpfr0uXAGIvm1/LPo+JXdgIch1zjEbI6UT9z8W4gAXHFlMVm+OekH4rE+cQ8yeAFi6DQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root b27fe64851…8f769c
0left387d591eea6b52f535…9dd8e685d0
1rightc515dc6e3504870785…7b597bc7dd
2left40172af2c5079447b1…5c7cf4bb6d
3left61edde8c1660bcee73…28f8a031f7
4right22704a1457f6799eb8…5bb884bccd
5left0f73974e9ba14db008…1d7d4f6b4b
6left3320dbdfdadb25bdd4…6c3cfa8f01
7right29271aca6ed696ca35…d4f5bb8ea7
8left1688c1e4a32a5083fd…4b7c26e6dc
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12rightcf85f5686b0099622a…7ce97e7b32
root
b27fe64851c5a2988c00c89c64643761f776f2bc71562c15698ea9c0128f769c