how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✕privacymemo carries a stellar secret seed, and this field is written to a public ledger
06✓rail integritysoroban-direct, -1.2s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leaksecret_key_in_annotation
memo carries a stellar secret seed, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBVRQDCFBZU4Z3ZR4UPAV23TRAODTXS5YXPO3VYO7EK2LK347WUOSLBU
- operations
- 1
- op 0 · movement
- 3239.3287872 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- payout key SCBPHDMCEI2XIAXWYDR3DFZZG2UPP22AAMFLU5FTJUOXNMEKY5UJ4OZN
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 4cc6e0d88fd4953d · signed
- clock skew
- -1.2s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_refund-desk_041f
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 4443085f526bfe61b4062b6ab348d5601684fbd7503c376b681708721a291a52
- transaction
- 9f84db575fcbc0358e8dea317b635d7e2fd34219935555bdcfedecc026605d41
the receipt
- entry
- 4777 of 7405
- previous entry
- ba3a900424e793e5ab0f361cbae6fa0a2e3b51aeaf8199801341ab29c76c8e0c
- leaf hash
- df85677c22fa7074d9579ce9a3fb2b40c37b59cfabb97f7508d4d9e1a38ccee5
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 3ZdzjVTgHbGSCS46AopovK0MpAyABDUiAdS33OHobRvt/UYoXHDBglcjdaV23ynXNuqCyCSxIgp0pyDbGdIzBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 6f8ee48c82…1af8c8
0leftba3a900424e793e5ab…29c76c8e0c
1rightb82d54c1df2e97455c…5e5ded0da4
2right46a9f03fb97844b226…087c93d227
3left3871e2c7903a9d212c…063c14d923
4right22e63604585b608a62…6f2d23262f
5left75c1c05e1b29ce21e2…0488dbd638
6right029624cbfb49088154…b769e4bfad
7left8ff71191901628c93a…62d334e864
8rightf4014cf557446bb624…43642a4211
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right275009688c837f7a63…a3140419e2
12leftdc8527842d65829ab0…fb53df942a
root
6f8ee48c82e9d284b40730187bcb49c9c9d4acb56f1afef38efe61446e1af8c8