how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 13d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integrityx402, 1.2s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRHRTFEUU24FA65267Q7OP5FNSVGF54KGFUYR5ORXS7WVKYEVDYWLGM
- operations
- 1
- op 0 · movement
- 346.7383686 EURC → GA4RCTAG47K3XJVRNUTAT2EWW3IKTAEMOYEIFEFC7HDPNQJ7RJMMZQKD
- memo (not trusted)
- invoice for a.rossi@dockside.example
- tool_call (not trusted)
- pay_vendor(vendor="dockside freight")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- dockside freight · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 13 days
- rail
- x402 · as the mandate names
- envelope
- nonce 24ed68554ca0cf75 · signed
- clock skew
- 1.2s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- 4d1cb1714f0c4847781cf5a7… · unchanged
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- a3680f8585ae2c79290fb293346f7dcf887bedbf8ec032f954d5aa5e4b1dfd1c
- transaction
- 1d3dfc2ae31c2108aabe4b1b0c26f00ac88e2b5a87e5ce21e261545aaf67508d
the receipt
- entry
- 4535 of 7411
- previous entry
- 3011410f11501f13407b8e519cc51c4e712a373496ff917b6ea18442d6fa404c
- leaf hash
- edeafc0903074b34756ef4a496f08d0067769f10f1add425d8e8caf97758d5ca
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- GfErimJVw31/RC3SYlJzhpFz2NVnI22BaeUyBR0xWRGv5zr9vrpO81Th2/JIEIhWfKZ0tjn03TFRh8jEEpitBQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 3cf8d092d3…6f96b0
0left3011410f11501f1340…42d6fa404c
1lefte1e5bd75953ef6ef5b…49ac7ccca4
2left220c57beb0bf8cd9a5…d208933c32
3right6a3ef1a40be97f3090…aeb76e5f18
4left1c179f3157049b33be…e9e93e409a
5lefta9f3bdef07ff455244…f0b8449c00
6rightd456a5c0d740f5e1c1…f1846a5dce
7leftdaee7ac1aefaa3c4ee…1a78985402
8left4e4bc411d7266f864e…35a4b2046e
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right145dfd2d4b928e4263…c4f9a6a7df
12leftdc8527842d65829ab0…fb53df942a
root
3cf8d092d3e2ffc8abd2ab26c8eaecb767bc22ccdcd20d476f7c5250e46f96b0