how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeagt_rebate-pusher_5f29 is not among the agents this mandate names
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 1.1s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
actor_authenticityactor_not_authorized
agt_rebate-pusher_5f29 is not among the agents this mandate names
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 8158.2488251 USDC → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice 2fa83e
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce beb0e121acb7594c · signed
- clock skew
- 1.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 2722c341c7e3c842899ba2dfc291f614b6aa0cedc4792579c96173b804646417
- transaction
- f28fa1bfde4baff965aa023a23c93c9123262577b27e4f82cb4de59a96dd4028
the receipt
- entry
- 3077 of 8700
- previous entry
- 51806906acfb8d6eca42afc5d58c485825cd6b29d0fc32de825bf5c2cc60a042
- leaf hash
- dee14cd7aa5e7b6791ad46120f7aa0f86094e8dbec01020013cc11c236b28b27
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- upp5CNiz1TMvsOmQA7rW05FrEJEgtRj3AQRoW/pNcOBtCdPFgqCH+m8lp5q6UcTFrheO2ugzFaxzXzPJcge5BA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root a90cbe702c…a0a4ed
0left51806906acfb8d6eca…c2cc60a042
1rightde98950f44c0117c81…f41348e62f
2leftfa53f0f025f43d44ea…5a513ef137
3right4080008a524feee04d…ba29dc9b1c
4right128f005cba08b775ab…94f94c5faa
5right28cbac2fb4e1c9d187…dd05cbfaf8
6right01258f1bbd8ecdee06…f6cceb83e8
7rightb301653ed33d37c64f…649ddab9bf
8right2a9459ab386a2a6911…2cfee0febb
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13right966ae39c654fb54333…732b816e0c
root
a90cbe702cc6f3be8be348411e429e2e86a93a6b26c38023a2a3af35cba0a4ed