how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, -1.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 5909.8396221 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice ae14dd
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 49dbe5f44cbcea95 · signed
- clock skew
- -1.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 4f1100ec331e40f756416915c97a26413248746af33482d00d45eea832f8374e
- transaction
- e6a7fe69c741048f93951498c680617342f190a1cfea863e90198ca5f41a984e
the receipt
- entry
- 3350 of 7839
- previous entry
- 77f6169512f2d761c9ba079487b6d18b0aec0ab16f8fb0f344a244ef8e67926d
- leaf hash
- e4a37f7b535ef60302096dc6c0e23d981388c5d9368f3e8fcee7eec234fce0c6
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- yBklQxjrjkndU3nP4hAfDHgqcAPONPifrdkrrVYWES7/CcANt7Ta8wq4TUUSWWHkRn2k0vOLKOlcOo7IDme2BQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root cfba777a57…d89cd0
0rightc8fe506e988cceefd0…f920d9337e
1left6bfe00014e409195b5…077ce2fb31
2leftfe2eb58cb46a1b2c62…22bd2f74e0
3right60c10f6234c307f90a…7835e06b79
4left3e24077e76bf20607b…faa664fb95
5rightdbc501c098f16f6f86…c77aff27cf
6right6d8cfd4edfd108498b…64e6b4d46e
7right29271aca6ed696ca35…d4f5bb8ea7
8left1688c1e4a32a5083fd…4b7c26e6dc
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right2ba53bc6c5dec0da32…d144bdedb3
root
cfba777a57cb138f76e319d47900cba40b1361ac06d42bb7e5ae5a68f6d89cd0