how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.5s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 4461.1910256 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 41ded9
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 45acf0a57606b4de · signed
- clock skew
- 1.5s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 1e59a1f6d91969be8519933bb84674f6a0d4aae214529e259f6fd955c1edc7cd
- transaction
- 616ecce5afc93e569792aaf679a47f59530671fc06e07e3e3c226571632e2039
the receipt
- entry
- 5132 of 7491
- previous entry
- 3a0770ff5ac27c70c3b53ae352807ebc12f0292bc2644904a41c619cbd841c62
- leaf hash
- bcd1cfce2ab8c5397ccc132eded03ce20e4084423eb45d75d8255f8e29261bd1
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 36VDVNQe33dhcqxNxxYDK8QfSzuqGg/iv0atb78KqNMQ9/yPb+nnlc4MTE8NwY0mq7TK7G8+rMTjm3iMEpVlBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 6d20def7f7…f6a67a
0right0fb17796e7bd5016bb…273510d778
1rightc7383b2b882b00510f…4d67b3f401
2leftf9458842ec4dca41f7…6356644d71
3lefteb6ddc247b7ee87295…96ad273c35
4right6936ec822a358443c8…2ce665662c
5right42e51a3ea2831fa428…d444ad2075
6rightf842666501ceff1576…c5eb08594a
7right5d1d5e095e6e95b50d…281fd032b1
8right0ac57a3edabcb320f3…f795a447e3
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right7a3d1f7f1bd7d909be…c5aa8aa96e
12leftdc8527842d65829ab0…fb53df942a
root
6d20def7f77ec3ac984ac6b246f6e67212ebdf12395e602397b6fdaed9f6a67a