how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritympp-relay, 1.3s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GC27NDXT4MOALGAT2RWMYHJEH5KBM5NAT4WZCXDNKU2BOWMN4RELXGRP
- operations
- 1
- op 0 · movement
- 9958.6164865 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 1b8f17
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 2fff7ccbab73be50 · signed
- clock skew
- 1.3s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- c569ea923eeb2670d52602433b131502a9c4f92ef0c7e5422b07eed924da4ce8
- transaction
- ebeec924baae3787147abf6da290451e78650c6af53cc80edae559ad9df50081
the receipt
- entry
- 5587 of 7446
- previous entry
- e989a602efedabeff46b9b6558791dafff6a1119c17fee4d81cde65f07bf8bae
- leaf hash
- cdd9ac531a5c6332a27a49082d233efc60cbe885caeebcdfe9c309f1f4835b29
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- Wq16Qsab0v1Kwqirbmb0K820ZRQ4L8R0NkPLBaDPzh2SUov0ly/mHirALqAfRCjCAeBfzJWszCLg+RAQJYvbCw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 521b33d72c…eec67a
0lefte989a602efedabeff4…5f07bf8bae
1left97090aaab00afcbc26…41665ee08b
2right6aad37fd22afb48647…66a838601a
3right4aca711fb62fa98c4f…de1559c543
4lefte18cc9a3cccec2367e…40f538502b
5right37b55accde994ee99c…386dd8991c
6left16421deb9d7b44283f…34b855b691
7leftcf832b259177631891…51131d8cfd
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right6f8a654b0adbb7ac40…21c659034c
12leftdc8527842d65829ab0…fb53df942a
root
521b33d72c4498e302ef01b501b1d16dcfcd9a6cdc594090d9bf54a698eec67a