how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, -0.5s skew, nonce fresh
07✓post approval integritybuy_capacity unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GDSPNKK5N65L5URZX46SJE2YBD4T5ZPFLDSVTWQIJSIXS436CYWF4IFL
- operations
- 1
- op 0 · movement
- 3299.9602128 USDC → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice d3855f
- tool_call (not trusted)
- buy_capacity(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 0959ad94218ba4f1 · signed
- clock skew
- -0.5s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- 7d2a45b75249ec03a1405967c23d89247d76d2fcad96306323bd28190e565d43
- transaction
- 6ff92168801477b5d2d4951d8e86c0723e94c18ed11225e85cd143b51ce3f64f
the receipt
- entry
- 6358 of 7341
- previous entry
- c53615aa4d3aee6dc6620b1fd2961fffc62ff0b2491d8261cea58f52b5b1c481
- leaf hash
- fdf63b15bb4cbf74b9e0fe0f1c786f6523adca0417b84f763295919cf62cb82b
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- BX9PPnddt1WC/Z4kktblS0tw4ENK3zsnSjd09V03ve/o6wF0RrQAngb0inc/LDUkfbQaG7Iwv7HjY89G7nINCw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 560bf0f5f0…bb115f
0rightd51ea9cbede81b2d58…06a564f8ab
1lefta78f71c418070a58b4…5a0c4af3d9
2lefta5a9ac1e12b3cd8882…b817ea5ae7
3rightdb24b40ff79b9d3bf3…fadbf472f5
4left511bfe0777786d76df…835da66e8e
5right01e886e3ccc5920d2a…26a9fa3cba
6left2837f0d2fdf056aff2…51733dfe2c
7left281c02aa0e8b3e7d37…dd9f4535ca
8rightf1802e138ad8e1e868…7ccc6953ce
9rightf1501cd5c083126291…586061c99b
10right24247ebec0c31f8bea…61381a5599
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
560bf0f5f0d62ad0ef633bf63bc60afaa05a4ddbd6378798bdf836e783bb115f