how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays GCBKGSPBC2LNE7PG74Y3ZV4VLTW2V2B4KX5TRABJ4VUEJQRPIGRNYDYN, which is not in the allowlist
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, -1.5s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandatedestination_not_allowed
op 0 pays GCBKGSPBC2LNE7PG74Y3ZV4VLTW2V2B4KX5TRABJ4VUEJQRPIGRNYDYN, which is not in the allowlist
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GB4OYDZTVAKAY3CX3NTLXUE5AZAI3PEE545U7PKEJM6WX35ZLRCXJFI4
- operations
- 1
- op 0 · movement
- 666.8588496 USDC → GCBKGSPBC2LNE7PG74Y3ZV4VLTW2V2B4KX5TRABJ4VUEJQRPIGRNYDYN
- memo (not trusted)
- invoice 06e119
- tool_call (not trusted)
- release_escrow(vendor="lumen datasets")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- self-custody drain · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 30 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce e1362e723d1875c9 · signed
- clock skew
- -1.5s against a 60s replay window
- tool approved
- release_escrow · f9a055f3564d4214d5dc8d13…
- tool executing
- f9a055f3564d4214d5dc8d13… · unchanged
- policy commitment
- d3ef096bdabb7e3f168cca35…
provenance
- actor
- agt_ad-buyer_0829
- mandate
- courier float
- mandate hash
- 44b4f567358a7907d331809f81bd053a5bd1ff4adbe8b38d148368d6a597ce2b
- rule hash
- d3ef096bdabb7e3f168cca35e71b0ac1b4491cf3c712e418c538a779175ca4bb
- request hash
- cefbe8942ee630519fa6846bf1445cfbd1275873c16d48a949ce4b54aead6b3d
- transaction
- c387b09b556e1a1adb08a9d8013757ac8a9dd0843b47b50419450a7bf8eb444c
the receipt
- entry
- 5356 of 7404
- previous entry
- fed7c54b3586902c627511914398c85a0fdcc5db896aff97791f08a85724a0ef
- leaf hash
- e5fbfd291e3fdcfb030b8ea390ddf0184365b218d7a80f9ea8f0bb05624662e7
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- ZMaGhuTFAq8Qnn4yYtPPxNp1+dBMIPTYp/p8FwQMmYykXy7ZYAM8NkKc11fZzTb26tJtAR8tTQtSVFG+q5zJDw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 03c79c2f42…8ff52b
0rightd29dd34a689f089db8…3d9c828aec
1right66b0e6ffb273ce4698…71fe383073
2leftd0837614b1faf105c4…481c6e6f3a
3lefta57ab063560f4e7b52…89e3040bef
4right264317d9be6ca4a623…bd0bef9c13
5left879f46d8f0f33c36f4…74d16a1441
6left327b467f86faf1e251…539452db7d
7left6f4459dcb265b45972…aff89b292f
8right0ac57a3edabcb320f3…f795a447e3
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right747f12f58baa04ca90…65cc7dde22
12leftdc8527842d65829ab0…fb53df942a
root
03c79c2f42ca9255de2536781df0b75d1aaa59b2e3ec0ffb772f49bf0a8ff52b