how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 287d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integritysoroban-direct, 1.4s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBVRQDCFBZU4Z3ZR4UPAV23TRAODTXS5YXPO3VYO7EK2LK347WUOSLBU
- operations
- 1
- op 0 · movement
- 3696.1512125 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- memo (not trusted)
- invoice for s.patel@ferry.example
- tool_call (not trusted)
- settle_invoice(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce ddcbc06c8b512645 · signed
- clock skew
- 1.4s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_refund-desk_041f
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- fcb322cb91f34e4dffaef42853b93147d6c76bfe4a45516e512c08d0977d40b1
- transaction
- d1d5d2990b3ee9c3ac083c42e599f8ab82626c6e79f98641eca24a24ffdeefce
the receipt
- entry
- 3508 of 7693
- previous entry
- ae9b476640541a9527dce329445788731d518a8488ca8b71e09e7a83ab933047
- leaf hash
- fec57db27dd47b0fe59a5bd75a0716e9068784b4769484d4a8907bc41c11632e
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- u/bICOfxpHGHXXJdgIWxTeDXKxGzkitP+yRH9UQSjZ0BNcuXPu/DvLPfj/aGuCtQTQtbsInxG4qdh300C1rIBQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root bfd47c6322…1b5d41
0right34185f7e880709c1ec…b742e7ac21
1rightba61d7e983a2cc5f81…95405bc0fc
2left01fd6d5a833bf09b34…267f3bc7f1
3rightb08cc46d192f22817a…e1414302fb
4left50372d70830aa4e177…ef4dcf3720
5leftb182e71ec852bb824a…2dfbf98013
6right9608dd77c014568922…e8e799ef5a
7left8bda8489d0293bcd8a…82a2436f94
8left1688c1e4a32a5083fd…4b7c26e6dc
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right9ef68116649810e5e4…163a877931
root
bfd47c632258e8fabcebcc312906ef0362738d24255b657c89dd50cd271b5d41