how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, -1.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBSDR4ZCBLW5J37XVUSEME44BFA53OHVEAHRKX7JKL6LUFBTMJIO3MJS
- operations
- 1
- op 0 · movement
- 3908.4207121 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice acb844
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce a0d4682090dc8f69 · signed
- clock skew
- -1.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- d882b6fa6ae168f72c269de6d232a4cf586d89a9eb95d538127c3bbd77a67ae6
- transaction
- 278242250bed3878d445d39bb8e07aac166053da29d220f0dc390467f994f9e4
the receipt
- entry
- 4255 of 7610
- previous entry
- fa664e92d6d49d228c920d33dd5f1e50d5ebdb89253a3dd167ee20c64d0609df
- leaf hash
- ebe0d5e7b4bd8fce08eec68163ec3667672df43fee7316a12ac53c66ee7345de
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- d2tCDy6Yt1/znJTXG4AbGChLiCWnmrwng0YnO7BoJ+K791hS3RXACnUzSJQxnVKQ7iTHq7j2aq6YahCvZREKCA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 6d1d431ce7…4a29a6
0leftfa664e92d6d49d228c…c64d0609df
1left935bdc73f94a60e47b…790b8a380d
2left9f55e758b56bc3b64e…d4f310ea34
3leftf1708ad43f1f66ff25…c43595d651
4leftd7627d214e261c4084…f42ef67c9b
5right81190403dcf9a85c34…eb8ef5bc3d
6right1b4d02f8dbba2cefa4…2282a4182f
7lefta9096948f77ef5d4e1…51cdb1d2cc
8rightc4ef35061cd7edaa58…68e4521d67
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right17aa8099b45d7635cf…2ca77aa217
12leftdc8527842d65829ab0…fb53df942a
root
6d1d431ce77b012a2b666cdf4d8f5122b78cf0f2256ec4193e7d5d00084a29a6