how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, -1.5s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBSDR4ZCBLW5J37XVUSEME44BFA53OHVEAHRKX7JKL6LUFBTMJIO3MJS
- operations
- 1
- op 0 · movement
- 3038.2607732 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 612405
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 826d227276d52322 · signed
- clock skew
- -1.5s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 5ffd3d656fa07c74f4a2d66c4842951d1fc9d7ad944c9b3f40145b57d3f03de2
- transaction
- 1c5d17cdf657e7dcb371ca8a92bde6edc4464f1db1598d94c6ea69f653ec0497
the receipt
- entry
- 5532 of 7343
- previous entry
- 3295aa1bb268f843e9a98c098245b79a05aa92cebc47af03e32ce778e3c438d7
- leaf hash
- d6650f48f16bd9e3fb86e19e3868bc5f831c902c46bbe0ccf55aad7f77a2888b
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- ++6U5mcrDAi/M0+RkT54jLAkWTa9sMjgS79zlAuXL127AntfGq2qm+ETdSEq/MrZQIpCmrzdvkKRdFWGcewMAw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root f960a987a5…99f706
0right5f70b21e70007d2746…b14336c771
1right0c84bf2b23285d0989…b5ab549856
2left348951fec3f00d81fd…b6c130c364
3leftb3a1fef3099ad7d5fc…6576ab3c67
4left48e7c4122087b2c07a…86b876b10e
5right3872afe61389897d78…09c3c3f892
6righte190dcbd679803e7aa…7b4289c505
7leftcf832b259177631891…51131d8cfd
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right1ebc5277fd2f99af88…39dd0139ed
12leftdc8527842d65829ab0…fb53df942a
root
f960a987a566cc0b8b9a0167ff666b9c92c5f112d67addafe6515886f699f706