how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritympp-relay, 0.5s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAH5XK7C6S6F7ZRIPPSQSZSJ46QXPYZ42B6BJHHJ3ZSXYD2FBHMNFPPA
- operations
- 1
- op 0 · movement
- 15008.5115985 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice a4a4b8
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 019cd43c2ebccc14 · signed
- clock skew
- 0.5s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- actor
- agt_cloud-spend_1ec0
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- e7f2841472437fefdb8c6c75c02db148e42206be52f71cb71c62eb74157e0738
- transaction
- bfa92c003b817a7b0b3531a90d60eff7b6339edf07f9184dcf9ea5c8a1b811c8
the receipt
- entry
- 2823 of 7560
- previous entry
- 3204f8925f1d2d8376a15518e277297cf30730133308647054df0173fb593847
- leaf hash
- db3e5d0d341c0ab2a2765626fc93058ef2b7475b0d50cafef129786a6003957d
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- SqKlAeMf6QGF87D3yJQG3cDbgUwL0SphPoQDUxZ3ejfVYV4J9h1N+Sfd9MUf70T1RpvWv5k+Jp9e3dJF7k7VDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root ab4300211f…9c3585
0left3204f8925f1d2d8376…73fb593847
1leftf6a9837a79146464c5…4182fd829b
2leftdffbed272051b74704…0488f0b25c
3rightd52a132a307c631111…f3f0b9b9be
4righta56e793146013451e3…bb95f92f85
5rightf2a8d91002e0990e4c…24df7468db
6right76cce291a04b1c3e1c…0eccc74829
7rightc2c09f138bffdbb123…607bc7161c
8leftaab6f46529b6997a69…7c0dd61c4d
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right3ad2143e4b07790177…928ba479fe
root
ab4300211fb874d981d4f754451c23640d56937bf89acf0af663d1f5f79c3585