how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays USDC, mandate allows XLM
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritympp-relay, 0.9s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateasset_mismatch
op 0 pays USDC, mandate allows XLM
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GC27NDXT4MOALGAT2RWMYHJEH5KBM5NAT4WZCXDNKU2BOWMN4RELXGRP
- operations
- 1
- op 0 · movement
- 15674.6996395 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 130f0b
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 8042d4f365c98670 · signed
- clock skew
- 0.9s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- 51094c54bd369e2d7b89183a76ed42fd4a340d619b489cbc748e93825a5d9f06
- transaction
- 1eb011df767b06f994d015982b2291597986be86f9b3fd7732036f24404f97ba
the receipt
- entry
- 5010 of 7409
- previous entry
- c9834d9d71a4110cb72825e536de015ac62a192d4c1b4f20865b492c04deb137
- leaf hash
- db8f972d54aee14526881f529bdec65648e11d8046e897fb1389680e15ea2244
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- h02vHX2h7nqW1zQvLR9s6rI/Hy147QEZEBu905/F5w5I1VXdyrmbjwlDFxDYdToQqtlqQIP1UrLozi6eYbZGDw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 59b88e1e66…2217d1
0rightc55e7e01132c75a4fd…98d25bb5bf
1leftc60547468dd6464f6b…4b95146498
2right21c4462cb803821620…9a29025af8
3rightcc5f3433690ed80051…2bafa35519
4left2c5565ae155ddb5814…12360a8502
5right8c08b22b55b9c630b2…9341a350ae
6right8133322a542e4bc11e…ee68e3ceeb
7left79f7450aea35c41d62…5e9e49deb3
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11righteb50a8859b15d0b9ba…63557174b9
12leftdc8527842d65829ab0…fb53df942a
root
59b88e1e66755397ccca85273f84dfa78a919aa4148225554fd0e84e922217d1