how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 287d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 0.5s skew, nonce fresh
07✕post approval integritysettle_invoice was 00198884d836… at approval and is b0eef6a994c0… now
why
post_approval_integritytool_definition_changed
settle_invoice was 00198884d836… at approval and is b0eef6a994c0… now
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBSDR4ZCBLW5J37XVUSEME44BFA53OHVEAHRKX7JKL6LUFBTMJIO3MJS
- operations
- 1
- op 0 · movement
- 7578.2953663 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- memo (not trusted)
- invoice 029f93
- tool_call (not trusted)
- settle_invoice(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 97d8f45a5a8744f8 · signed
- clock skew
- 0.5s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- b0eef6a994c0d456f36a9f86… · changed since approval
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 2751f72276b2922c1810ec2bf4ddf092c09704ac05276f46c96c2539ddc8ee4f
- transaction
- 09264157e57c0c5b296cf81f5ebfe2729f446e00d5f2c158bc40cf09c1b23a10
the receipt
- entry
- 4258 of 7537
- previous entry
- 0cbef310861ab39fce70558d8b54a6dbf2d5ad5ba607d01be2ad0dced009f803
- leaf hash
- e79d76fb76e1672c01f76939ae1b500956362be200d076fb89a285f4cc1d7b6b
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- U5k+Zqym8zdpYFy73L0EEilwEs1tbx/isctg5AFop2fvDWsmiCSh5b6u5rk9LpRYjTS2NLZjhgARLuRz4j2HDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 78a21013e2…107a64
0rightb0d014b89b551951b7…f92bcb21d6
1leftab1fc365efc0437b71…0453aeb44a
2rightf80843877dad6917b5…8712eeada9
3right9fbb0278d6f83b1582…be8b0e7165
4right730997bdf791477128…b89afee150
5left1fe95c509a9849e13c…fd0819c762
6right1b4d02f8dbba2cefa4…2282a4182f
7lefta9096948f77ef5d4e1…51cdb1d2cc
8rightc4ef35061cd7edaa58…68e4521d67
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right260b2d895dedbc4ea8…dee97bf19a
12leftdc8527842d65829ab0…fb53df942a
root
78a21013e2a1b95a92ea0411a2c7f71f6f641dd8e0290b3d6091caecb9107a64