how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✕privacymemo carries an iban, and this field is written to a public ledger
06✓rail integritysoroban-direct, 0.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leakiban_in_memo
memo carries an iban, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 11054.2180020 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- remit GB93NWBK2229957293903215
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 25636f55ce54497f · signed
- clock skew
- 0.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 8c97f236959735f4973a39732cdbce3c95f52f045f52b3ba3d9983f4c0284222
- transaction
- ac701f8bedb3694c7038f872160bf1053a0213da0fe7519da86299993a25ea56
the receipt
- entry
- 4994 of 7536
- previous entry
- 0adce96f419ab608dff3ac8907ea4ccd46994b3082ec6ffd823263a811f7b543
- leaf hash
- d2871f3890f34f598a8c16a1dc1e59fe31b100d2862d320b4eb6e8e7efcefcd8
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- YmvG2aWj44bR5IYmrhensxJJObNwxD6Uy+0Itp+9ZYGKQjCiTw6wa4BlQDLgLByOQHkf4e/svz5uhXDsIW40AA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root ab009b8848…a86976
0right95a16c43132b81a696…63635be364
1leftb69bc32e7858315dbd…15ac3db28c
2righte3cd358ab678c04913…0e61572760
3right7baa5ab6e9e995859b…6bbea9ba23
4rightc7063d2441de0e6db7…c675475e3f
5right8c08b22b55b9c630b2…9341a350ae
6right8133322a542e4bc11e…ee68e3ceeb
7left79f7450aea35c41d62…5e9e49deb3
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right420d60fbfb1d6aa068…5def068ff1
12leftdc8527842d65829ab0…fb53df942a
root
ab009b8848a75a8ea0f133c82b2a3d8b2d9f684def273c7025a4027818a86976