how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 1962212.56, cap is 1031814.27
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, -0.4s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 1962212.56, cap is 1031814.27
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCK2IIIS5G3SIUJPTSSJIC5CSUMLTWZ737DSQTB2KJR63I5XJD47YFOJ
- operations
- 1
- op 0 · movement
- 1962212.5608530 XLM → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice 939a39
- tool_call (not trusted)
- settle_invoice(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 27fcd364e4bf12f1 · signed
- clock skew
- -0.4s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- 74a0449595b68400cd5940b88f8f9b927ff69eed6b39ddbce3af24d53e11458c
- transaction
- bb119943033d0820edc6375aeca2b349ec876a780fd8ed9e18b70a8d7113129a
the receipt
- entry
- 7246 of 7445
- previous entry
- fa1aebe3d9c4abdf0ea49e3e4dc7d05e37eecea4453483b764c1d0ff0437720d
- leaf hash
- caba1d4e40f008365ff55f811f69b1564ef9b3b638bd8e07bfe0b350daecf0e8
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 4nUmKlo1cJUAKtgHOaV1hqB8Z0twWbuo0WZCp6721yEWxBs1fu+VZLqjtg3hz6oM8tSBgDnjSR1B1AYcyvRNBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 45e7fd66f0…4fe1dc
0right9d676c21bdeaa0f9eb…310da16183
1left45b9ca8835b8ef8964…ff2e283136
2leftd5a421c43462385cfb…76aec15bfd
3left6ecebe7105e746dbb5…386315067b
4right8c2a31006be6b540b9…09d05f2cc2
5rightd467942ff6b474990a…a3e49c043a
6leftb945222011aee84d24…6c88fd0de9
7rightdfb76264df56718f36…ac7cd86de2
8rightf39a4c15c3ab547268…3ae212a866
9left48b90477dd015bba52…ce0d79dfde
10left4043c82f03366d541c…af7a3fd4fe
11leftdc8527842d65829ab0…fb53df942a
root
45e7fd66f0cbf02d4f9f4c54c8e3bbd9fb3261b7274808e9b3a5b8c8b94fe1dc