how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopemandate signature does not verify against the stated issuer
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, -0.1s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandate_authenticitymandate_signature_invalid
mandate signature does not verify against the stated issuer
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAO7VSWNNZZQWYUNNSUJXO6FWEHC5VLUGDWAEOOWG5DRYYY56Q2Q52LZ
- operations
- 1
- op 0 · movement
- 10659.1535334 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- memo (not trusted)
- invoice 1f5708
- tool_call (not trusted)
- settle_invoice(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce ce476efc68c46995 · signed
- clock skew
- -0.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- d374798c212ec715efefce7c8946da04cadb89322b5951d60370aaac3929b10d
- transaction
- abc8e9d98d7ea4a00784be56479d988f8a965cd2614e738b2b034beba56e428e
the receipt
- entry
- 2778 of 7411
- previous entry
- a0f6e7b309a52c7d188fa38cdb464fcb4cb62755946050f0a4441b274c39d467
- leaf hash
- e7f44c0c0e18c2571090b4a0ebbf48269601853f9f89a54de0a4232c6bef1542
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- Ic3y+zdAUFadtt66DUTKovIdGQ+J2v6sIS2rsWlssql/HZmz4CIcBZ1lnA0ddh1dYVIjJ6oyFYYFCBdjw6cZDA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 3cf8d092d3…6f96b0
0right65a791bb9baffb0bb9…8d0d578bc2
1left3c645f9d743cd751da…4d1ddec2d1
2rightea1e53824689d1569a…f811605b7f
3leftac7d9ff3831f66ae58…925f8e8809
4left432358f2871706a38d…a18664a904
5rightbe05aee54a0bd32c59…5c9b9d3810
6left4ffaa8506f56810eeb…23989a189d
7left7b23e2c4e24f966cea…5ab2de4da5
8rightbd4d9f0271ede98c3c…f686b62b8e
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12rightbaa482e7c56a9ce91b…280de289a4
root
3cf8d092d3e2ffc8abd2ab26c8eaecb767bc22ccdcd20d476f7c5250e46f96b0