how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 7180.4790626 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 8ba446
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce d66ae0bbdfc061ec · signed
- clock skew
- 1.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 46b3cb5b3f0c45dc285edf37938d1ffd7ca8d30679a4aa02a10b267e8c515d80
- transaction
- 9e2f9bada710ee80dea38803307de075c2e29493e59d56b32f7b721cc6989221
the receipt
- entry
- 3604 of 7537
- previous entry
- afd85b629493c230bbef6ddd276ade1ddf861b0f0f10695e80401af7997721f6
- leaf hash
- da0572d96010dfd3be6d24f23a31ecc29a30081509d1750aa553f87f5a5829df
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- ofIbJhejn9b8sFPr69+2Hmg100gbdWHjR9JJmTpii+6n4+NmIS9+ocJkSyZFBkr48IIVlntwRvd6gijDVgAqAw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 78a21013e2…107a64
0right2c6b5d6ec95916e934…6614ae0d6f
1rightfe186782686d083f8b…56488573f2
2left4332aeb3e8554f0c1b…96d819a5cf
3righta86e4165426d6add3f…70ab434814
4leftbe3d4ad9e48f0cc648…afdace6c52
5right5f00a5428429015d0b…49efd9244a
6right1920c419c843a1c9cc…0b9749c36c
7right0f3e15ecdf4ef9a1b5…aae3d3293d
8right65cf229241d209b91d…79f338c06b
9left1f8bece408d15a8047…f91777f0e3
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right721cb58a529ac221ae…7f68d60c7c
root
78a21013e2a1b95a92ea0411a2c7f71f6f641dd8e0290b3d6091caecb9107a64