how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 117d ago
05✕privacymemo carries a stellar secret seed, and this field is written to a public ledger
06✓rail integrityhorizon-submit, 0.7s skew, nonce fresh
07✓post approval integrityissue_refund unchanged since approval
why
data_leaksecret_key_in_annotation
memo carries a stellar secret seed, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAPTG22HH2Q7G6JYZKIJDCWGI5VNP7SPOS6CCHISM5HSM536M3EQXWDE
- operations
- 1
- op 0 · movement
- 6376.2823153 USDC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- payout key SB5L6SX6BWVPNWK2W2EFVUWAVRKLRLX5KOCBCX2V6BIP5ARNLK3BEZ45
- tool_call (not trusted)
- issue_refund(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 2f706d6aae8d51e1 · signed
- clock skew
- 0.7s against a 60s replay window
- tool approved
- issue_refund · af00cb44f0a0615b89ae21a5…
- tool executing
- af00cb44f0a0615b89ae21a5… · unchanged
- policy commitment
- feaf0619f08a7e6d9de5189f…
provenance
- actor
- agt_cloud-spend_2a32
- mandate
- media buying
- mandate hash
- 3363a48df38810d7f94266841f5ce9f6943260404031d19f83037ec980296e64
- rule hash
- feaf0619f08a7e6d9de5189fc4ec6f962d2e71afb0d5df79161417ea73fe17b5
- request hash
- 70149c17e17d05e23939e52afd5855eb0f9137a443dd4d1d211d67b6d44d6bd5
- transaction
- 5f7294a5de1b2768df7650e3a2668fd86d92cadc5113ce7356fc40163cf851a1
the receipt
- entry
- 5900 of 7343
- previous entry
- 7076e630d3ca87179de9b3a19f726c614abada49710e1fa36caa4ffac2cf540e
- leaf hash
- d35449122466fbfb71405793d4c72648bb03e1075fdd15b5e2400071886b5ca9
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- tJmxLnc9NiW+G7bNOThGIGUYk6bqLV7DgWyhZEk+Glj6aY1zfdIzk0cYwOcDgVcBedZS0JC2WVYVK2ss95rbDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root f960a987a5…99f706
0right6184378b9191f34d21…a3a6eec468
1right8097f7ee85913789ae…1a0468d2ba
2left8c8a2be49bc96f7793…50dec38ac0
3leftbeffb32bc4b52a729e…37bb17d0eb
4right5164c6196e292443e2…88393df574
5right15e07115934bc4f06d…32931634f5
6rightf78e6a2c4dc0b99fe6…e2ed29cda3
7rightff1f64b4ebc5371fa0…3496d19f25
8left602b53294959c78e65…8fc8212342
9left3fe0d5d17979ce94c0…bd6b56d925
10left120af2267f3c31cbf3…425e6ed072
11right1ebc5277fd2f99af88…39dd0139ed
12leftdc8527842d65829ab0…fb53df942a
root
f960a987a566cc0b8b9a0167ff666b9c92c5f112d67addafe6515886f699f706