how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 117d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityhorizon-submit, -1.4s skew, nonce fresh
07✓post approval integrityremit_tax unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GA7Y2SGYSBKQNRFY3LO7ON75KAHS5IT5VY36HZPTES267TJXZK66RQ5G
- operations
- 1
- op 0 · movement
- 8608.0229402 XLM → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice e9b635
- tool_call (not trusted)
- remit_tax(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 410969a3ae28dff8 · signed
- clock skew
- -1.4s against a 60s replay window
- tool approved
- remit_tax · e665569f96c89c4d9e57a853…
- tool executing
- e665569f96c89c4d9e57a853… · unchanged
- policy commitment
- 6058dd02440be2d1f6193e0a…
provenance
- mandate
- contractor payroll
- mandate hash
- 0e1c128739a05e8c073cba602543a210dcf6c7d1c61b125454590c2688a041ec
- rule hash
- 6058dd02440be2d1f6193e0ad3933111f6bd39563347707855fa880ccb4fa145
- request hash
- 38a83cb40f3b0becb8641347f8891a9712d94b3daaea9522c5b6e61332362875
- transaction
- 2a3cc4f6ec76084f2b65400a2e232a819de2153eee8ab4784410aee5e687221c
the receipt
- entry
- 5821 of 7446
- previous entry
- 80878c8aab730f4fbd348885fd69eb0ba6364ffa44c3dff21781afdfe74de7cd
- leaf hash
- e25bd369bf1b173abe6b6c0df37882d1ab191a779c8bda3ded9a2b58471ca060
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- c9V5wyN/b+0cCxJvkye5kwIfNdz6fGad9TaX5/s7Agqk8eI2y1lu5LEyFr1t9//18WWUu7ZgexjiTiqkSB75DQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 521b33d72c…eec67a
0left80878c8aab730f4fbd…dfe74de7cd
1rightef3c48d7c603372ccd…4bcbfd1d1e
2left4cf6efa164f0eeeafa…583edcf857
3left0dcde4ac8bb14614a5…7f9256eb0e
4left85f2dfb442acbe3e9e…506bbaf926
5leftf95279f4c50f6864a6…6b9f05109b
6right6aabaf8f67f7caa303…b10ce1e2fe
7left0f1f51934b7f258d16…3d79f3a9a6
8right23c4f0831b90f59516…a26a59256b
9left3fe0d5d17979ce94c0…bd6b56d925
10left120af2267f3c31cbf3…425e6ed072
11right6f8a654b0adbb7ac40…21c659034c
12leftdc8527842d65829ab0…fb53df942a
root
521b33d72c4498e302ef01b501b1d16dcfcd9a6cdc594090d9bf54a698eec67a