how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.1s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 4029.0657371 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 745f17
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 372ce754ab9afa3e · signed
- clock skew
- 1.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- c51634a2d6f0f130633823132433c7e148d992664986725b0610828ccc6a3010
- transaction
- af6404de8615ba5bde3a0bb949753b14a6c4aac2158ee31d743d13f10fe5e19f
the receipt
- entry
- 2202 of 8442
- previous entry
- 202e8cda5e9cd382455033a454c8cc3e9cb284a9a52d45bff946bddfb3a5a7f8
- leaf hash
- e2471226f875a269dca7d08cad16803c3d7447081dec558624044872d10b056f
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 5NUoS6sxGOgebPpb5XXYi7HOIxvSmv9cWscB7lYHemmFnQ99hnz9hECso3nLPXZhB0pvgaSkir/qJr0Aay4FBw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 8b20ab1aef…2c7ec6
0rightc4b76086e0d62550f9…16e3ae2ae0
1left5b85392fad4e4430bc…e7a64cffb2
2right99ef80bd8dd6b21eed…2bfc2dff94
3left137c702be0a2e5e5ba…7128cdab3d
4left6f93c1849249e4d0e5…e316b45e54
5right4ad08f58cd4768591a…e88c994557
6right58b1e5f0fb69088c4a…04a24f0797
7left80838e123e3b67694c…002c788183
8right343106862a40792d91…7061efa225
9righte799ad94e5ec8f5b18…1eb984ac76
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13right4e78cb6cf2ee386050…d311fb6f88
root
8b20ab1aefb5d611bbccdd7450b7262b4a0c9d23b8aec2f55d7556a8102c7ec6