how it was scanned
01✓realityclear
02!mandate scopeop 0 pays 49670.28, above 80% of the 50000.00 cap, human approval required
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 0.6s skew, nonce fresh
07✓post approval integritybuy_capacity unchanged since approval
why
mandateamount_near_cap
op 0 pays 49670.28, above 80% of the 50000.00 cap, human approval required
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GDSPNKK5N65L5URZX46SJE2YBD4T5ZPFLDSVTWQIJSIXS436CYWF4IFL
- operations
- 1
- op 0 · movement
- 49670.2756205 USDC → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice 9da889
- tool_call (not trusted)
- buy_capacity(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce a03ca8fe95f3d91c · signed
- clock skew
- 0.6s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- 703c2e5adec6f200a4891b6b86a9716f5b1bbb4a0e7b77c2e482b07160518024
- transaction
- 472dde90252d09b87df983f432c8f8e1d94e456742398bf1f7410b8482917dc5
the receipt
- entry
- 4301 of 7403
- previous entry
- f54b127825f6b525e4597b57bf8b02d74b3ac1a3970365d85ffddf847ad61579
- leaf hash
- f56f5fec5ca4de167c573b89cd74fd861c12dbb8a964b467883f51bd57f2a9d3
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 1KLn1W7Jykvv+L/q4LzyfjDIX6S9jgngM2GjMciXW0Vllw6/ergoonkOiwo++Rb9dn7qMWrWytMwffX3HJG7CA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root aa7beee6a2…fdc67e
0leftf54b127825f6b525e4…847ad61579
1right08bf444a0eac37b1a7…3a04a14d26
2left615d4e01d026c1828e…4a654d5e13
3left9ee7c2a28047956146…68b472ee27
4right930f90024a445d2b09…c2dbd978a2
5right1d46399f7b8247ebf4…b2784e324d
6lefte793cad5cfbfd753cc…bc9d8eb39a
7lefta9096948f77ef5d4e1…51cdb1d2cc
8rightc4ef35061cd7edaa58…68e4521d67
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right0a030a216cac3b8e8b…93bd2e19c0
12leftdc8527842d65829ab0…fb53df942a
root
aa7beee6a23cfffb103ba3dd25c2aa580ed55951f24bc222aa6f0b7056fdc67e