how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritympp-relay, 1.3s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAH5XK7C6S6F7ZRIPPSQSZSJ46QXPYZ42B6BJHHJ3ZSXYD2FBHMNFPPA
- operations
- 1
- op 0 · movement
- 34794.9327410 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 2ab1c4
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 68bbfd660ce41e6d · signed
- clock skew
- 1.3s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- actor
- agt_cloud-spend_1ec0
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- adf24c5b18a83804f6503a7de8691015f7cb37450d3ea110aced034750ddc489
- transaction
- f83ed6da1b33c0d3aa4c2faa37e488ce89def71bea2509b0342be6ea0cd5ebd6
the receipt
- entry
- 3997 of 7413
- previous entry
- 56f2ea24ab862895a72f0c117e5ff9afb657dd9da0950bc73aa808f98a72eb16
- leaf hash
- d00f4a3210787bb80bb2efe309913fa34e31bae74ff83a4833cc02145106e262
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- KfJJnyN+3bIYygrwQHiqHB+28rCeH6GzjZj9iPh00BaUHD6AcnA6PN7mvkYGA+LMbSxzFGCUYQwftW2NPnfZBw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root fbd6a013f9…e35f75
0left56f2ea24ab862895a7…f98a72eb16
1right16b7f97c21b7389c0c…d8be091c0f
2left8f1d3be15143947d10…d2b41c39b0
3leftf28efe1eada8ef0bdd…0132f43627
4left607ab1e7a0a38e3a7d…806dbc2264
5right8946b4a2df41b57f86…13a18a1636
6right89b597512a12d54936…4a2749efc5
7left774525e13b8be12b11…664638b979
8left29c454556c69d47a2a…2632854b0d
9left1f8bece408d15a8047…f91777f0e3
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right68a6d82237a2b7f4a1…a89d2d8134
root
fbd6a013f9451a6efc3f8d070c76ea426140c50805da001491e0a0d810e35f75