how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 0.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 8942.2375694 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice d60bdd
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce dba05109428a53e9 · signed
- clock skew
- 0.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 116ee9bee585342e5b7a14aa11c34ed9e485b031f5e21cc0df163cec9578c83d
- transaction
- 3ee88bd8f52958ee8515e056fe01ec13ebc5669709dab034559f95e656a53edd
the receipt
- entry
- 5165 of 7448
- previous entry
- 35db56b3469496f00181571af25d3364c48c07f70097a2a6af49a280d3e1c439
- leaf hash
- cc1a560c4b76c468453087f72d098ee657ee21324258f71b610eae60750af57e
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- WlgKlazNoQwKMl2epECV7epPPlB3W7zFDd4FyJFEyGP1nHf8gEtPKf/wx13KzPsLJDo7NR86VuKhqUtnJNDqBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 00bb58334d…d2678b
0left35db56b3469496f001…80d3e1c439
1right751b0e715aec71f98d…d9781223e1
2lefta395e420493db1a40e…0bd32de08a
3left3aba45018d568ce994…775d13b153
4rightfcec284a48f5504d08…9dac55b5c7
5leftf0d90dfa8f947e489a…e199cb8e9e
6rightf842666501ceff1576…c5eb08594a
7right5d1d5e095e6e95b50d…281fd032b1
8right0ac57a3edabcb320f3…f795a447e3
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right37fc32e3fc5f4cb4cb…e8afcf4f86
12leftdc8527842d65829ab0…fb53df942a
root
00bb58334d580d6ebb46a35101c7968413f8d02e8d502c9fb749c779a6d2678b