how it was scanned
01✓realityclear
02!mandate scopeop 0 pays 975993.27, above 80% of the 1031814.27 cap, human approval required
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityhorizon-submit, 0.9s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
mandateamount_near_cap
op 0 pays 975993.27, above 80% of the 1031814.27 cap, human approval required
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCJCW6F2LQNESISSOWIKYSG5OBLBQS6GAZ4W2K2TZLZ36UD43BKDBHYP
- operations
- 1
- op 0 · movement
- 975993.2677857 XLM → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice 5d7304
- tool_call (not trusted)
- settle_invoice(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 8882e2d9f64eb53f · signed
- clock skew
- 0.9s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- b0b4eda0caad88989bcf62f9f4db4f93c62215aa8a4e37a17684f2bb8743503f
- transaction
- fea07770026baf3d1a32a919ca80f19240532dd8ca209fb02aeef3e29ef3dbd3
the receipt
- entry
- 5369 of 7402
- previous entry
- 40af040315edb9d4f441b84acb556c3a9f1f2fce3e141aa0f1a627d94fca7e51
- leaf hash
- dd972017e372d2ecaf421a4b987741016b21ff7f2b2f7f85d31298f21b0ec217
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 40DCy3rKBCxQYyKHMcOgsVeaX5y1sLnGrec3bqupa8WkY823tCvlmYZpyzwPQrbinYgAR5WdZ6GcmmEVbQEvAw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 308aaf868d…afd4a1
0left40af040315edb9d4f4…d94fca7e51
1rightb5640d50f7de20b51e…956b767cf8
2right8f22303fd882d2974c…eacbcc0eb6
3left69a480544788a6b48e…d8c254de48
4leftb9577cb3987d5707e3…ace3f79451
5left879f46d8f0f33c36f4…74d16a1441
6left327b467f86faf1e251…539452db7d
7left6f4459dcb265b45972…aff89b292f
8right0ac57a3edabcb320f3…f795a447e3
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11rightd3c0bfb7876a95c9b4…a043cba499
12leftdc8527842d65829ab0…fb53df942a
root
308aaf868d3fbda789f304cf6cdbc613041b63a44b31595ac0fcd09d49afd4a1