how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 117d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityx402, 1.4s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRHRTFEUU24FA65267Q7OP5FNSVGF54KGFUYR5ORXS7WVKYEVDYWLGM
- operations
- 1
- op 0 · movement
- 123.7218548 EURC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice 9ae902
- tool_call (not trusted)
- pay_vendor(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- x402 · as the mandate names
- envelope
- nonce 663e264c6377401f · signed
- clock skew
- 1.4s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- 4d1cb1714f0c4847781cf5a7… · unchanged
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- 46981ddf9328dfacb43af5a9665de36872221e3acddc484e1c6c9032aee87280
- transaction
- 23b109983c4f9e4965c1ae840499d66314923a98c679731866209c81a27100b7
the receipt
- entry
- 5956 of 7498
- previous entry
- 4c2e7f2a95d91231435db264ef6c5809c7d368ded1e2f40fafafe316af0152de
- leaf hash
- d76e8db2ed2325182568a959e1493ee985929eb118256f1f25ec9133a2f2a567
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- X0gw/fxSdsgCUJbfEWv5TPyRJgDAfB8OVvTRFFxc3XsqbuQWDlBCG8Ep4gROgJv2FLMrAt7O6UrVrjnDJdNkCA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 7ee60c80cc…ecd6ed
0rightd2b979f35281226101…a9a17fb1af
1rightbc6ea848623eeb4f1e…baa1b2a417
2lefte2422b02836302e634…214ab13110
3righta3b45c769796609c33…342a79a704
4right692aa15629494ccfde…95ac91191e
5right55fd92c444ab2e2884…6d00dc8c83
6leftae8c4b48ea477ffeda…a2ae8fe239
7rightff1f64b4ebc5371fa0…3496d19f25
8left602b53294959c78e65…8fc8212342
9left3fe0d5d17979ce94c0…bd6b56d925
10left120af2267f3c31cbf3…425e6ed072
11right06c9d2dd6d591b6de3…486f5d1539
12leftdc8527842d65829ab0…fb53df942a
root
7ee60c80cc5d3513b54cd64bc61b6ef7d2e129a8d821671d850d35f898ecd6ed