how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 1299779.51, cap is 1031814.27
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, -0.4s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 1299779.51, cap is 1031814.27
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCJCW6F2LQNESISSOWIKYSG5OBLBQS6GAZ4W2K2TZLZ36UD43BKDBHYP
- operations
- 1
- op 0 · movement
- 1299779.5114260 XLM → GCTUINPFM5KIE6NGXUIBPBOOMF7O43WF4WJT4BKRDGZDSBEBT2TSGUSK
- memo (not trusted)
- invoice d2a218
- tool_call (not trusted)
- settle_invoice(vendor="harbor insurance")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- harbor insurance · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce a3c10500c8e6275b · signed
- clock skew
- -0.4s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- 26bf0ef4764b88339b7294dd4a18bca7c727a79f357a02a17abd813a839ad975
- transaction
- 9d094da525caaf430123635881f49f669449dd4e4f3d5dbd4240961473229e74
the receipt
- entry
- 3185 of 7445
- previous entry
- b03ca20344b3fab5e2b64b06bbbc09b83faff4e8a95398a00832751e6aea1bed
- leaf hash
- e532b4be335ece7054839621eecdcedd123b4ab2520945ab99e80db21d95f4be
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- BpaawwPxTMhKjBauYgId8otuKGhXgmxiaN4PgqqjBeuKeZVkdwFm9HWWfR9QDY8wIYYmytE+DHphmxpIBNDCCQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 45e7fd66f0…4fe1dc
0leftb03ca20344b3fab5e2…1e6aea1bed
1rightbb4358df05700ea9c9…8d4f185840
2righta95b97ded5aedc324a…cf581acca6
3right9b0b5a378facd4014d…21b47929d2
4left0a7c1fb89b40ccf414…eab994e976
5left21344bfff6394b623e…735386cb93
6leftc773645ed9fec69e7b…9b0a2fa719
7rightb301653ed33d37c64f…649ddab9bf
8right2a9459ab386a2a6911…2cfee0febb
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right20ae290d6dff1a1943…1e2b37867a
root
45e7fd66f0cbf02d4f9f4c54c8e3bbd9fb3261b7274808e9b3a5b8c8b94fe1dc