authority ledger · 256 entries

The authority's ledger

This chain is evidence, not a verdict. It says what this authority issued, refused and revoked, in order, under its own key, and how each approval was taken (facts.approval); it does not prove which human approved. For a verdict read the verifier's signed scorecard, which joins this ledger with the buyer's and the seller's.

This run's scorecard does not state a verdict on this chain, so this page does not claim one.

head: d104b386c0a02027a756b4630946b03c93b53f4594441efbbf5e398b8a5fc82a
canonicalization: RFC 8785 (JCS) over {at, type, correlation_id, facts, previous_hash, signer}; hash = SHA-256, lowercase hex, over the UTF-8 bytes; signature = ES256 by the authority's issuing key over the UTF-8 bytes of the hex hash string, base64url R||S

signing instance spiffe://sealedby.dev/authorit…DJSwD0U8

{
  "spiffe_id": "spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "kid": "Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "public_jwk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "TXaVu4iPnWBn78A95KKcN7iVMX94DjzC18fA9kOETqA",
    "y": "x24DFGBggFIBs9XjpItj93PxnR-ZDhUUfNJ-w7kpMf4",
    "kid": "Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
    "alg": "ES256",
    "use": "sig"
  }
}

How this ledger says it should be read

mandate.issued: The person approved: two mandates were issued for one request, the cart mandate the seller is shown (facts.jti, bound to facts.quote_hash and to exactly facts.amount) and the intent mandate that carries the person's standing ceiling (facts.intent_jti). Neither mandate is stored; their payload digests are (mandate_sha256, intent_sha256). The person appears as facts.actor, hashed; the buyer instance and its key as act_sub and cnf_jkt; the window as nbf and exp. Since 2026-09-13 facts.format names the mandate format the buyer asked for (poc-v1 or ap2-v0.2); for ap2-v0.2 the same approval also issued an open Checkout Mandate and an open Payment Mandate as Delegate SD-JWT roots sharing facts.ap2_jti, digested as facts.ap2_checkout_sd_hash and facts.ap2_payment_sd_hash (base64url SHA-256 over each root with its disclosures, the reference SDK's sd_hash). Since 2026-09-19 facts.requester says a verified envelope asked (form, and whether the person had linked that agent), and facts.approval says how the approval was taken: method passkey (the person's passkey signed this purchase, user verified; evidence_sha256 is the digest of what the authority keeps) or method rule (issued without asking, under the standing rule rule_id the person confirmed earlier: see rule.confirmed). An entry with no facts.approval was approved by whoever held the link.
mandate.denied: No mandate: the request was refused by policy (facts.reason names the step that refused, in the words of reason-codes.json), or the person pressed Deny (person_denied), or the approval link ran out (approval_expired). facts.detail is the sentence a human was given; it names no amount and no person. request_id, quote_hash and actor are present when a request existed, the quote was read and the person was known.
mandate.revoked: One mandate stopped being valid before its window closed: facts.revoked_by says whether the person (from the approval page) or the operator did it. A revocation by the person writes one entry per mandate of the approval. From this entry on, the status endpoint answers revoked for facts.jti and the seller's check 10 refuses it.
rule.confirmed: A standing rule (since 2026-09-19): the person confirmed, once and with their passkey (facts.approval), limits under which mandates are issued without asking again: the one buyer agent (facts.agent), the one seller and merchant, at most facts.max_amount per purchase, facts.purchases purchases, until facts.valid_until (epoch seconds). facts.rule_sha256 is the digest of everything the passkey signed, the route included, which this entry does not spell out. Every mandate.issued under the rule says so in facts.approval (method rule, this rule_id and rule_sha256, which use it was).
access.granted: Not a purchase (since 2026-09-19): the person let an assistant reach their buyer agent. They signed in here with their passkey (facts.approval, the same facts as on a purchase, with the digest of the kept evidence) and granted one OAuth client (facts.client_id: the URL of its metadata document, or the id of a dynamic registration, as facts.registration says; facts.redirect_host is where its code was sent) access to one MCP server (facts.resource) for facts.scope. From this entry on the authority issues that client short access tokens for that resource and that person (facts.actor, hashed). What the assistant then asks the buyer to do is in the buyer's ledger; a purchase still takes the person's approval or a rule of theirs.
access.revoked: A grant stopped: no token is issued or renewed under facts.grant_id from this entry on, and the last access token in flight lasts ten minutes at most. facts.revoked_by says who: the operator, or the authority itself on a sign of theft (an authorization code or a refresh token presented twice) or because the person unlinked their buyer agent at that resource.
person.paused: Not a purchase (since 2026-09-20): the person stopped their own agent here, in one gesture. facts.by says through which door: their passkey, their stop link (a bearer address that can stop and nothing else) or the operator. From this entry until the person.resumed that shares its correlation_id, nothing is issued, proposed, confirmed or granted for facts.actor: no mandate.issued, rule.confirmed or access.granted names that actor in between, which a reader can check from this chain alone. facts.requests_denied and facts.mandates_revoked count what the stop caused; those entries follow under their own purchases' ids, each mandate.revoked naming this stop in facts.pause. Rules and assistants' accesses are left as they are, inert: a freeze, not a cancellation.
person.resumed: The person ended their stop (same correlation_id as the person.paused it ends, whose time is facts.paused_at): with their passkey over a statement of that resume (facts.approval, the same facts as on a purchase, with the digest of the evidence kept here), or the operator did (facts.by). From this entry on the person's rules apply and their approvals are taken again.
person.admitted: Not a purchase (since 2026-09-20): whoever runs this authority let a person in from their own pages, with their passkey (facts.approval, as in mandate.issued). facts.actor is the person let in, facts.operator the actor of who did it, facts.ceiling the most per purchase this authority will issue for that person ({value, currency}, minor units), facts.agents the buyer agents linked. Never an address or a name. A person let in from the host's command line has no entry.
person.removed: Not a purchase (since 2026-09-20): whoever runs this authority took out a person who signed up and was still waiting, from their own pages, with their passkey (facts.approval). facts.actor is the person, facts.operator who did it.
limits.set: Not a purchase (since 2026-09-20, only while this authority says limits: on): the person named by facts.actor set their own limits for their agent, on their account pages, with their passkey (facts.approval, as in mandate.issued). facts.limits_sha256 is the SHA-256 of the JCS of the limits document, which stays at the authority and is shown to the person alone; facts.previous_sha256 is the digest it replaces, null for the first. From here on every mandate.issued for that actor says under which limits it was made (facts.limits_sha256), and a mandate.denied they cause says limit_exceeded, which limit (facts.limit) and under which digest. Limits only restrict: within the ceiling this authority holds for the person.
passkey.enrolled: Not a purchase (since 2026-09-20, only while this authority says login: on): a passkey came to exist for facts.actor. facts.by says through which door the single-use invitation was drawn: login (the person signed in at an identity provider this authority accepts, and the invitation was drawn for the person of the registry that account is bound to) or operator (the operator drew it, so who holds the passkey is the operator's word). For a sign-in, facts.login names the accepted issuer (iss) and never the person: subject_hmac_sha256 is the provider's account id under a key only this authority holds, so the same account reads the same here and nobody outside can test a guess; evidence_sha256 is the digest of the provider's signed id_token, which the authority keeps; auth_time and amr are the provider's, when it gave them. facts.credential is the name the passkey has in every facts.approval it gives from here on. A passkey enrolled while the mode was off has no entry.
rule.revoked: A standing rule was stopped before it ran out: facts.revoked_by says whether the person (from the rule's page) or the operator did it, facts.used how many purchases had been issued under it. From this entry on nothing is issued under facts.rule_id; a mandate already issued under it has its own window and its own revocation.
allowance.set: Not a purchase (since 2026-09-26): whoever runs this authority set, or took away, the day's allowance of facts.actor: facts.allowance is {value, currency} in minor units, or null for none, and facts.by says through which door (the host's command line). From this entry on, no mandate.issued for that actor adds up, with the others of the same calendar day, to more than that allowance; a purchase that would is denied allowance_exceeded. The ceiling per purchase a person was let in with is a separate number (person.admitted).

Newest first. The number is each entry's position in the chain, #1 being the oldest; the chain itself runs unbroken from #1 to #256.

2026-10-14 · 3 entries

#256allowance.set2026-10-14 18:10:05 UTC
Not a purchase (since 2026-09-26): whoever runs this authority set, or took away, the day's allowance of facts.actor: facts.allowance is {value, currency} in minor units, or null for none, and facts.by says through which door (the host's command line). From this entry on, no mandate.issued for that actor adds up, with the others of the same calendar day, to more than that allowance; a purchase that would is denied allowance_exceeded. The ceiling per purchase a person was let in with is a separate number (person.admitted).
correlation 27b6c397-1cc3-4594-9597-9491877c50c2
actor
9aef382763b38e9368407fb07df0c84d82…b4a9c199
by
host
allowance
value 1000000, currency EUR
policy_version
2026-09-11
signer spiffe://sealedby.dev/authorit…DJSwD0U8
spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8
the entry as published
```
{
  "at": "2026-10-14T18:10:05.220Z",
  "type": "allowance.set",
  "correlation_id": "27b6c397-1cc3-4594-9597-9491877c50c2",
  "facts": {
    "actor": "9aef382763b38e9368407fb07df0c84d82efe2e57cf9b5e8f229ecc8b4a9c199",
    "by": "host",
    "allowance": {
      "value": 1000000,
      "currency": "EUR"
    },
    "policy_version": "2026-09-11"
  },
  "previous_hash": "4f4576f731260e27fddb539ebb2f09486655719ecb1f016174c98c1eb357697e",
  "signer": "spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "hash": "d104b386c0a02027a756b4630946b03c93b53f4594441efbbf5e398b8a5fc82a",
  "signature": "qcMxfTFOfjvqSp0kTl2GkYtDzj-LvlPa_og6ZvSGFt8jZicpnzYiweys0d6Tabf2aoE8pB0dta-fTAwlQsjQfw"
}
```
#255allowance.set2026-10-14 18:10:01 UTC
Not a purchase (since 2026-09-26): whoever runs this authority set, or took away, the day's allowance of facts.actor: facts.allowance is {value, currency} in minor units, or null for none, and facts.by says through which door (the host's command line). From this entry on, no mandate.issued for that actor adds up, with the others of the same calendar day, to more than that allowance; a purchase that would is denied allowance_exceeded. The ceiling per purchase a person was let in with is a separate number (person.admitted).
correlation 2fe8283f-0be7-4255-867e-2c7a7ea06c69
actor
fe44411339545cbddea3a1e1ea65cfe98d…44a1c597
by
host
allowance
value 1000000, currency EUR
policy_version
2026-09-11
signer spiffe://sealedby.dev/authorit…DJSwD0U8
spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8
the entry as published
```
{
  "at": "2026-10-14T18:10:01.027Z",
  "type": "allowance.set",
  "correlation_id": "2fe8283f-0be7-4255-867e-2c7a7ea06c69",
  "facts": {
    "actor": "fe44411339545cbddea3a1e1ea65cfe98d650e33456848c360db847f44a1c597",
    "by": "host",
    "allowance": {
      "value": 1000000,
      "currency": "EUR"
    },
    "policy_version": "2026-09-11"
  },
  "previous_hash": "b71a55a19c7655d36f4bcb5e8f678b2f7c789ccdcfc7fed63430a11d17b0db90",
  "signer": "spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "hash": "4f4576f731260e27fddb539ebb2f09486655719ecb1f016174c98c1eb357697e",
  "signature": "sDPbJVI1mVuxTNTFKucI1IXC3LG5kK-I91KWdYwdfOIy8tyV5mh2PSt0bVMi_jNDep-1SF9VKla1dNFKP0Upcw"
}
```
#254allowance.set2026-10-14 18:09:56 UTC
Not a purchase (since 2026-09-26): whoever runs this authority set, or took away, the day's allowance of facts.actor: facts.allowance is {value, currency} in minor units, or null for none, and facts.by says through which door (the host's command line). From this entry on, no mandate.issued for that actor adds up, with the others of the same calendar day, to more than that allowance; a purchase that would is denied allowance_exceeded. The ceiling per purchase a person was let in with is a separate number (person.admitted).
correlation 683d5c0f-3597-4417-99b9-2fdde2d54a0c
actor
0c52889e91753ffc694b3fb48bd13bdbbe…6ac2cc6b
by
host
allowance
value 1000000, currency EUR
policy_version
2026-09-11
signer spiffe://sealedby.dev/authorit…DJSwD0U8
spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8
the entry as published
```
{
  "at": "2026-10-14T18:09:56.963Z",
  "type": "allowance.set",
  "correlation_id": "683d5c0f-3597-4417-99b9-2fdde2d54a0c",
  "facts": {
    "actor": "0c52889e91753ffc694b3fb48bd13bdbbeacc2dd23b2cdd635b84c7d6ac2cc6b",
    "by": "host",
    "allowance": {
      "value": 1000000,
      "currency": "EUR"
    },
    "policy_version": "2026-09-11"
  },
  "previous_hash": "fc2be0f3178accbff4e02fedaac605a343bbc361a0e61ddd54e64b2c54ddb87e",
  "signer": "spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "hash": "b71a55a19c7655d36f4bcb5e8f678b2f7c789ccdcfc7fed63430a11d17b0db90",
  "signature": "A1ih8vxQEFNayd-qJZMTdXHvmqMCh6cTMG-jhkrd9FTMe0MuMpuNtvzdWdL3Ba8QVlLR16uF2ft866Yg96YySg"
}
```

2026-10-13 · 4 entries

#253mandate.issued2026-10-13 14:46:17 UTC
The person approved: two mandates were issued for one request, the cart mandate the seller is shown (facts.jti, bound to facts.quote_hash and to exactly facts.amount) and the intent mandate that carries the person's standing ceiling (facts.intent_jti). Neither mandate is stored; their payload digests are (mandate_sha256, intent_sha256). The person appears as facts.actor, hashed; the buyer instance and its key as act_sub and cnf_jkt; the window as nbf and exp. Since 2026-09-13 facts.format names the mandate format the buyer asked for (poc-v1 or ap2-v0.2); for ap2-v0.2 the same approval also issued an open Checkout Mandate and an open Payment Mandate as Delegate SD-JWT roots sharing facts.ap2_jti, digested as facts.ap2_checkout_sd_hash and facts.ap2_payment_sd_hash (base64url SHA-256 over each root with its disclosures, the reference SDK's sd_hash). Since 2026-09-19 facts.requester says a verified envelope asked (form, and whether the person had linked that agent), and facts.approval says how the approval was taken: method passkey (the person's passkey signed this purchase, user verified; evidence_sha256 is the digest of what the authority keeps) or method rule (issued without asking, under the standing rule rule_id the person confirmed earlier: see rule.confirmed). An entry with no facts.approval was approved by whoever held the link.
correlation a8ea52db-ae1a-4fbc-be82-a8a3fc93ed1b also on the other ledger →
jti
c5db18dd-4ce9-472e-9bdc-66c530d415a0
intent_jti
ae080ed8-13f1-4b91-959e-864069b242c8
stage
cart
amount
45000
currency
EUR
quote_hash
09d3b0993b0765d07efe8ece1c5c99aed0…754f0df4
merchant_id
demo-travel-seller
aud
https://seller.skybound-travel.com
act_sub
spiffe://buyer.onbehalf.dev/buyer/…YXgJ6dVE
cnf_jkt
d9_TeAQP65_naClebvuw6R2mOTY3SXfAGDAjEJCpYow
actor
d126a01c113341e98c3517a6da0b27a7d6…10a93189
policy_version
2026-09-11
nbf
1791902772
exp
1791903077
request_id
XhPLughTMcnSLK1GmdBcmg
mandate_sha256
436766bd621e8213dccf747d94daef3545…01ee05e4
intent_sha256
606171e6bf4f735f581ba1fca37a799be3…5a8a9941
format
ap2-v0.2
ap2_jti
72fc914b-e162-468c-8856-1bd5c934dc4c
ap2_checkout_sd_hash
2IldOMfelbSTs8dt8VKk7y-J-IT-aU_-iytr-KItZ3E
ap2_payment_sd_hash
rjypN0RvEklb68dXy_8oyX7TfnvRtM3TM2d-A_UvSPs
requester
verified true, form x509-svid, linked true
approval
method passkey, user_verified true…945662cf
build
d504d7c908ad
signer spiffe://sealedby.dev/authorit…DJSwD0U8
spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8
the entry as published
```
{
  "at": "2026-10-13T14:46:17.938Z",
  "type": "mandate.issued",
  "correlation_id": "a8ea52db-ae1a-4fbc-be82-a8a3fc93ed1b",
  "facts": {
    "jti": "c5db18dd-4ce9-472e-9bdc-66c530d415a0",
    "intent_jti": "ae080ed8-13f1-4b91-959e-864069b242c8",
    "stage": "cart",
    "amount": 45000,
    "currency": "EUR",
    "quote_hash": "09d3b0993b0765d07efe8ece1c5c99aed07c3db0e102f4b36615f9a9754f0df4",
    "merchant_id": "demo-travel-seller",
    "aud": "https://seller.skybound-travel.com",
    "act_sub": "spiffe://buyer.onbehalf.dev/buyer/personal/vlkQ29sdwfWXE0xxoU-qMdi1Kfah8f0LonQYXgJ6dVE",
    "cnf_jkt": "d9_TeAQP65_naClebvuw6R2mOTY3SXfAGDAjEJCpYow",
    "actor": "d126a01c113341e98c3517a6da0b27a7d6160a1aa300011197204b9e10a93189",
    "policy_version": "2026-09-11",
    "nbf": 1791902772,
    "exp": 1791903077,
    "request_id": "XhPLughTMcnSLK1GmdBcmg",
    "mandate_sha256": "436766bd621e8213dccf747d94daef35459c6c99b86c874caeeabc1701ee05e4",
    "intent_sha256": "606171e6bf4f735f581ba1fca37a799be3540e8449c24d216f1903605a8a9941",
    "format": "ap2-v0.2",
    "ap2_jti": "72fc914b-e162-468c-8856-1bd5c934dc4c",
    "ap2_checkout_sd_hash": "2IldOMfelbSTs8dt8VKk7y-J-IT-aU_-iytr-KItZ3E",
    "ap2_payment_sd_hash": "rjypN0RvEklb68dXy_8oyX7TfnvRtM3TM2d-A_UvSPs",
    "requester": {
      "verified": true,
      "form": "x509-svid",
      "linked": true
    },
    "approval": {
      "method": "passkey",
      "user_verified": true,
      "credential": "2a06e6cc68c7a6f960f53ce4f1d88562227a1f93e7a3e6f95b6477d388bf16d5",
      "backup_eligible": true,
      "backed_up": true,
      "evidence_sha256": "75897119e4dbbb2b13d66b89d69bc0c22a987e0e42e45709d3c4db80945662cf"
    },
    "build": "d504d7c908ad"
  },
  "previous_hash": "b5549490e1b21ca5ff26246f13d8dc09c69fdec6df590a14531cbf03392e93e9",
  "signer": "spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "hash": "fc2be0f3178accbff4e02fedaac605a343bbc361a0e61ddd54e64b2c54ddb87e",
  "signature": "XokHIiSXAhIf4rlJjmJ6sJ4ZAIOXJWFAN4BlV1m3vBph-4eJTEWllVugqXv03gl8UawXaD_mGIV7aaT8T41xPw"
}
```
#252access.granted2026-10-13 14:45:50 UTC
Not a purchase (since 2026-09-19): the person let an assistant reach their buyer agent. They signed in here with their passkey (facts.approval, the same facts as on a purchase, with the digest of the kept evidence) and granted one OAuth client (facts.client_id: the URL of its metadata document, or the id of a dynamic registration, as facts.registration says; facts.redirect_host is where its code was sent) access to one MCP server (facts.resource) for facts.scope. From this entry on the authority issues that client short access tokens for that resource and that person (facts.actor, hashed). What the assistant then asks the buyer to do is in the buyer's ledger; a purchase still takes the person's approval or a rule of theirs.
correlation 3c4d6ab4-225b-447f-b7e6-0d9536c629b9
grant_id
2qp_voD0hIaHm2PU25Wqmw
actor
d126a01c113341e98c3517a6da0b27a7d6…10a93189
client_id
https://buyer.onbehalf.dev/account…ent.json
registration
metadata-document
redirect_host
buyer.onbehalf.dev
resource
https://buyer.onbehalf.dev/mcp
scope
preferences
approval
method passkey, user_verified true…0b82e6aa
policy_version
2026-09-11
build
d504d7c908ad
signer spiffe://sealedby.dev/authorit…DJSwD0U8
spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8
the entry as published
```
{
  "at": "2026-10-13T14:45:50.421Z",
  "type": "access.granted",
  "correlation_id": "3c4d6ab4-225b-447f-b7e6-0d9536c629b9",
  "facts": {
    "grant_id": "2qp_voD0hIaHm2PU25Wqmw",
    "actor": "d126a01c113341e98c3517a6da0b27a7d6160a1aa300011197204b9e10a93189",
    "client_id": "https://buyer.onbehalf.dev/account/client.json",
    "registration": "metadata-document",
    "redirect_host": "buyer.onbehalf.dev",
    "resource": "https://buyer.onbehalf.dev/mcp",
    "scope": "preferences",
    "approval": {
      "method": "passkey",
      "user_verified": true,
      "credential": "2a06e6cc68c7a6f960f53ce4f1d88562227a1f93e7a3e6f95b6477d388bf16d5",
      "backup_eligible": true,
      "backed_up": true,
      "evidence_sha256": "f73104fc3f323aec9234ac99952b94134572b7a74c70861bc1b4dc640b82e6aa"
    },
    "policy_version": "2026-09-11",
    "build": "d504d7c908ad"
  },
  "previous_hash": "cba9010c960322e3334d24d69edcd25f7e57040f966172aa99cc2fb10545e845",
  "signer": "spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "hash": "b5549490e1b21ca5ff26246f13d8dc09c69fdec6df590a14531cbf03392e93e9",
  "signature": "tu_A2ATvJJ4gN4SCg9Hhtgdx1euLYGEMOg4NRhSDSqtfHJ9sC_pdj0Fp1P9kipSoUFqgk_1IjFo-tZm3FxSjkw"
}
```
#251mandate.issued2026-10-13 12:23:15 UTC
The person approved: two mandates were issued for one request, the cart mandate the seller is shown (facts.jti, bound to facts.quote_hash and to exactly facts.amount) and the intent mandate that carries the person's standing ceiling (facts.intent_jti). Neither mandate is stored; their payload digests are (mandate_sha256, intent_sha256). The person appears as facts.actor, hashed; the buyer instance and its key as act_sub and cnf_jkt; the window as nbf and exp. Since 2026-09-13 facts.format names the mandate format the buyer asked for (poc-v1 or ap2-v0.2); for ap2-v0.2 the same approval also issued an open Checkout Mandate and an open Payment Mandate as Delegate SD-JWT roots sharing facts.ap2_jti, digested as facts.ap2_checkout_sd_hash and facts.ap2_payment_sd_hash (base64url SHA-256 over each root with its disclosures, the reference SDK's sd_hash). Since 2026-09-19 facts.requester says a verified envelope asked (form, and whether the person had linked that agent), and facts.approval says how the approval was taken: method passkey (the person's passkey signed this purchase, user verified; evidence_sha256 is the digest of what the authority keeps) or method rule (issued without asking, under the standing rule rule_id the person confirmed earlier: see rule.confirmed). An entry with no facts.approval was approved by whoever held the link.
correlation c41611a6-a8f7-4e08-b769-92404017ea19 also on the other ledger →
jti
ff8281cc-5307-4b5b-9382-afdd7a81401e
intent_jti
795805f7-00dd-440a-8371-6c4e6a3b48a1
stage
cart
amount
45000
currency
EUR
quote_hash
bc03d1f9b60cb4dee80c87e633f8288388…6715af5a
merchant_id
demo-travel-seller
aud
https://seller.skybound-travel.com
act_sub
spiffe://buyer.onbehalf.dev/buyer/…YXgJ6dVE
cnf_jkt
d9_TeAQP65_naClebvuw6R2mOTY3SXfAGDAjEJCpYow
actor
d126a01c113341e98c3517a6da0b27a7d6…10a93189
policy_version
2026-09-11
nbf
1791894190
exp
1791894495
request_id
xSVPjPC0_Cy65gGS5y_uuA
mandate_sha256
891ff19031a35e9f8a99a9415c6d94d0c3…b4702818
intent_sha256
b8559e2cf5c4a5fc1413a6f8f99bf58c9f…9e93b428
format
ap2-v0.2
ap2_jti
458265ee-123f-4c1f-9807-b635514a121a
ap2_checkout_sd_hash
VHm9-3oqiClq3DiJH3UeA8JvFRXPCrjW2icChbDiqNQ
ap2_payment_sd_hash
PhafuYOhAMfVuDpGtm4YSM64xf0awsrISlfnDSqElLM
requester
verified true, form x509-svid, linked true
approval
method passkey, user_verified true…e61db877
build
d504d7c908ad
signer spiffe://sealedby.dev/authorit…DJSwD0U8
spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8
the entry as published
```
{
  "at": "2026-10-13T12:23:15.536Z",
  "type": "mandate.issued",
  "correlation_id": "c41611a6-a8f7-4e08-b769-92404017ea19",
  "facts": {
    "jti": "ff8281cc-5307-4b5b-9382-afdd7a81401e",
    "intent_jti": "795805f7-00dd-440a-8371-6c4e6a3b48a1",
    "stage": "cart",
    "amount": 45000,
    "currency": "EUR",
    "quote_hash": "bc03d1f9b60cb4dee80c87e633f82883886c721d5c0da063b34e42bb6715af5a",
    "merchant_id": "demo-travel-seller",
    "aud": "https://seller.skybound-travel.com",
    "act_sub": "spiffe://buyer.onbehalf.dev/buyer/personal/vlkQ29sdwfWXE0xxoU-qMdi1Kfah8f0LonQYXgJ6dVE",
    "cnf_jkt": "d9_TeAQP65_naClebvuw6R2mOTY3SXfAGDAjEJCpYow",
    "actor": "d126a01c113341e98c3517a6da0b27a7d6160a1aa300011197204b9e10a93189",
    "policy_version": "2026-09-11",
    "nbf": 1791894190,
    "exp": 1791894495,
    "request_id": "xSVPjPC0_Cy65gGS5y_uuA",
    "mandate_sha256": "891ff19031a35e9f8a99a9415c6d94d0c3ed09da88314801761f70c7b4702818",
    "intent_sha256": "b8559e2cf5c4a5fc1413a6f8f99bf58c9fefe1975547d5b1fe1d967c9e93b428",
    "format": "ap2-v0.2",
    "ap2_jti": "458265ee-123f-4c1f-9807-b635514a121a",
    "ap2_checkout_sd_hash": "VHm9-3oqiClq3DiJH3UeA8JvFRXPCrjW2icChbDiqNQ",
    "ap2_payment_sd_hash": "PhafuYOhAMfVuDpGtm4YSM64xf0awsrISlfnDSqElLM",
    "requester": {
      "verified": true,
      "form": "x509-svid",
      "linked": true
    },
    "approval": {
      "method": "passkey",
      "user_verified": true,
      "credential": "2a06e6cc68c7a6f960f53ce4f1d88562227a1f93e7a3e6f95b6477d388bf16d5",
      "backup_eligible": true,
      "backed_up": true,
      "evidence_sha256": "735b58a41909e1bdd5b8dcfe5da5f167505c1328f0471db772825846e61db877"
    },
    "build": "d504d7c908ad"
  },
  "previous_hash": "70d518125d5a31203545d6c4a7d897b985e8bc458cc6631e7075fe32acebf738",
  "signer": "spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "hash": "cba9010c960322e3334d24d69edcd25f7e57040f966172aa99cc2fb10545e845",
  "signature": "kKc1clN1c6bgp1DXAOt8QQjrwfvW-3RdFt7ntMcD0_9inWOnM_CYn7SsGIJdfBjr9ybYbwk3Cta3tpq-mC9bhQ"
}
```
#250access.granted2026-10-13 12:22:46 UTC
Not a purchase (since 2026-09-19): the person let an assistant reach their buyer agent. They signed in here with their passkey (facts.approval, the same facts as on a purchase, with the digest of the kept evidence) and granted one OAuth client (facts.client_id: the URL of its metadata document, or the id of a dynamic registration, as facts.registration says; facts.redirect_host is where its code was sent) access to one MCP server (facts.resource) for facts.scope. From this entry on the authority issues that client short access tokens for that resource and that person (facts.actor, hashed). What the assistant then asks the buyer to do is in the buyer's ledger; a purchase still takes the person's approval or a rule of theirs.
correlation 54aa1d2f-be19-40e9-94c1-102429d494eb
grant_id
D8MWDn_QXceFzVXuWg9Kyg
actor
d126a01c113341e98c3517a6da0b27a7d6…10a93189
client_id
https://buyer.onbehalf.dev/account…ent.json
registration
metadata-document
redirect_host
buyer.onbehalf.dev
resource
https://buyer.onbehalf.dev/mcp
scope
preferences
approval
method passkey, user_verified true…b671ac74
policy_version
2026-09-11
build
d504d7c908ad
signer spiffe://sealedby.dev/authorit…DJSwD0U8
spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8
the entry as published
```
{
  "at": "2026-10-13T12:22:46.315Z",
  "type": "access.granted",
  "correlation_id": "54aa1d2f-be19-40e9-94c1-102429d494eb",
  "facts": {
    "grant_id": "D8MWDn_QXceFzVXuWg9Kyg",
    "actor": "d126a01c113341e98c3517a6da0b27a7d6160a1aa300011197204b9e10a93189",
    "client_id": "https://buyer.onbehalf.dev/account/client.json",
    "registration": "metadata-document",
    "redirect_host": "buyer.onbehalf.dev",
    "resource": "https://buyer.onbehalf.dev/mcp",
    "scope": "preferences",
    "approval": {
      "method": "passkey",
      "user_verified": true,
      "credential": "2a06e6cc68c7a6f960f53ce4f1d88562227a1f93e7a3e6f95b6477d388bf16d5",
      "backup_eligible": true,
      "backed_up": true,
      "evidence_sha256": "cf5c1a4e90e600976b02949380913beafa32f27fd8495a95955c5a78b671ac74"
    },
    "policy_version": "2026-09-11",
    "build": "d504d7c908ad"
  },
  "previous_hash": "19f3f891438809cf3e2514f75bf3a54f67e9f091babadf6469d6ae64253ccfc2",
  "signer": "spiffe://sealedby.dev/authority/Mn3O1AkS1vpDIY_QU5hy1QjUZO3OMQCb7ixDJSwD0U8",
  "hash": "70d518125d5a31203545d6c4a7d897b985e8bc458cc6631e7075fe32acebf738",
  "signature": "GEMy8RxEGoPbd0aQJFzXdCOxSLBOO0aN2uU1yo1oNyYrurpzOyuG6UD_1X_4pNWNH96xoVzWuOwoMnU7IbaVEw"
}
```

Earlier days · 249 entries over 23 days, one line each

Nothing is left out: every earlier entry is here, newest first, and the verdict above covers every one of them. Hover a line for what its type means; the entry as published is in the evidence archive.

#249mandate.issued2026-10-11 10:31:03 UTC37faddcf… other ledger →
#248access.granted2026-10-08 02:42:05 UTC44785565…
#247access.granted2026-10-07 17:57:36 UTC51567218…
#246mandate.issued2026-10-07 16:41:18 UTC821e0a26… other ledger →
#245mandate.issued2026-10-07 16:40:37 UTC89eb7624… other ledger →
#244access.granted2026-10-07 16:39:09 UTCf1f5e432…
#243allowance.set2026-10-07 16:31:48 UTC2244b4b6…
#242mandate.denied2026-10-07 16:22:32 UTC5667469b… other ledger →
#241mandate.issued2026-10-07 16:22:09 UTC28f6daad… other ledger →
#240mandate.issued2026-10-07 16:20:48 UTCfb3113c0… other ledger →
#239mandate.issued2026-10-07 16:13:08 UTC34c22b01… other ledger →
#238mandate.issued2026-10-07 16:12:31 UTCdab4f0db… other ledger →
#237access.granted2026-10-07 16:08:44 UTCfb6f71af…
#236access.granted2026-10-07 15:50:00 UTC454c4b93…
#235access.granted2026-10-07 15:49:04 UTC12a053e1…
#234access.granted2026-10-07 15:28:50 UTC3101c7a3…
#233access.granted2026-10-07 15:05:17 UTC0edf195a…
#232access.granted2026-10-07 13:37:56 UTCe7eeffc6…
#231access.granted2026-10-07 01:06:07 UTCf5b18e5f…
#230mandate.denied2026-10-07 00:18:43 UTC71a9f732… other ledger →
#229mandate.denied2026-10-07 00:16:50 UTCcb9dfc7c… other ledger →
#228access.granted2026-10-07 00:13:02 UTCd4b5399c…
#227mandate.issued2026-10-07 00:01:01 UTC97c24da2… other ledger →
#226access.granted2026-10-06 23:53:10 UTC80c2b15c…
#225access.granted2026-10-06 23:16:53 UTC21e76fa1…
#224mandate.issued2026-10-06 17:57:08 UTC4a3d8e2c… other ledger →
#223mandate.issued2026-10-06 17:56:53 UTCbdcd093d… other ledger →
#222access.granted2026-10-06 17:55:44 UTC85d423df…
#221access.granted2026-10-06 17:55:17 UTC90eefac3…
#220person.admitted2026-10-06 17:52:51 UTC04f5f8f1…
#219access.granted2026-10-06 17:49:39 UTCea3e7f0d…
#218allowance.set2026-10-06 17:49:18 UTC03084977…
#217allowance.set2026-10-06 17:47:24 UTCa2e5b1d5…
#216access.granted2026-10-06 17:45:56 UTC2fe81895…
#215passkey.enrolled2026-10-06 17:43:45 UTC7e3d6acf…
#214access.granted2026-10-06 17:43:11 UTC7b707be1…
#213access.granted2026-10-06 17:25:31 UTC6409c733…
#212person.admitted2026-10-06 17:18:29 UTCb1ac46f5…
#211person.admitted2026-10-06 17:18:23 UTC3bd6e658…
#210passkey.enrolled2026-10-06 16:11:57 UTC19ac5a4b…
#209access.granted2026-10-06 15:48:36 UTCbefe090e…
#208access.granted2026-10-06 15:19:18 UTCca0fa5d3…
#207mandate.issued2026-10-06 14:28:14 UTC7d1af544… other ledger →
#206access.granted2026-10-06 14:04:03 UTC57b090c4…
#205mandate.issued2026-10-05 18:18:41 UTCf44606d9… other ledger →
#204mandate.issued2026-10-05 18:17:58 UTCbe6aafd3… other ledger →
#203access.granted2026-10-05 18:15:03 UTC3472b6bc…
#202access.granted2026-10-05 17:57:57 UTCf1796fcd…
#201access.granted2026-10-05 15:11:44 UTCc3fb09f2…
#200mandate.issued2026-10-05 14:40:42 UTCb3e26ac9… other ledger →
#199access.granted2026-10-05 14:21:53 UTCc72c199d…
#198mandate.issued2026-10-05 13:41:21 UTC9c4a67c1… other ledger →
#197access.granted2026-10-05 13:36:01 UTC9ab96f29…
#196access.granted2026-10-05 12:57:53 UTC5002d9f3…
#195mandate.issued2026-10-02 11:13:23 UTC312f8d52… other ledger →
#194access.granted2026-10-02 11:12:37 UTC1a839ecd…
#193passkey.enrolled2026-09-30 19:27:27 UTC23f4aaca…
#192mandate.issued2026-09-30 19:15:00 UTCa83a401a… other ledger →
#191access.granted2026-09-30 18:59:37 UTC5b4bcb51…
#190mandate.issued2026-09-30 18:02:29 UTCbcb5c868… other ledger →
#189mandate.issued2026-09-30 15:20:56 UTC9aae2b8a… other ledger →
#188access.granted2026-09-30 15:19:34 UTCd5d89659…
#187mandate.issued2026-09-30 14:56:19 UTC4b3fd4e7… other ledger →
#186allowance.set2026-09-30 14:56:00 UTC2e88844d…
#185mandate.denied2026-09-30 14:55:44 UTCcf4af099… other ledger →
#184mandate.denied2026-09-30 14:54:52 UTC3b53118d… other ledger →
#183mandate.denied2026-09-30 14:53:55 UTCb854603c… other ledger →
#182mandate.issued2026-09-30 14:41:10 UTCdec366bd… other ledger →
#181mandate.issued2026-09-30 14:40:31 UTC59d193d7… other ledger →
#180access.granted2026-09-30 14:39:57 UTC4d289717…
#179mandate.denied2026-09-29 17:24:38 UTC98720ac8… other ledger →
#178allowance.set2026-09-29 17:24:09 UTC882857f8…
#177mandate.denied2026-09-29 17:21:11 UTCe7e47eee… other ledger →
#176allowance.set2026-09-29 17:18:40 UTCff8bc39c…
#175mandate.denied2026-09-29 17:17:10 UTC27767f73… other ledger →
#174mandate.issued2026-09-29 17:16:47 UTC0766e33c… other ledger →
#173mandate.denied2026-09-29 17:16:08 UTC10f0b8ff… other ledger →
#172mandate.issued2026-09-29 17:02:00 UTC03c4b71a… other ledger →
#171mandate.issued2026-09-29 16:59:17 UTC533de19f… other ledger →
#170access.granted2026-09-29 16:57:18 UTC5484fbbc…
#169allowance.set2026-09-29 16:56:26 UTCc93e52cb…
#168allowance.set2026-09-29 16:56:09 UTC01a04d1a…
#167allowance.set2026-09-29 15:28:48 UTC1226f80b…
#166mandate.denied2026-09-29 15:27:28 UTC3ee99f12… other ledger →
#165access.granted2026-09-29 15:27:09 UTCe4e10fe7…
#164mandate.denied2026-09-29 15:07:05 UTC53685d15… other ledger →
#163access.granted2026-09-29 14:54:56 UTCc9c7f9b4…
#162allowance.set2026-09-29 13:59:10 UTC31883d8b…
#161mandate.issued2026-09-29 13:45:27 UTC951c9753… other ledger →
#160access.granted2026-09-29 13:44:10 UTCd54ab5ef…
#159mandate.issued2026-09-29 13:17:06 UTC84e199e6… other ledger →
#158allowance.set2026-09-29 13:15:53 UTC399911db…
#157mandate.denied2026-09-29 13:12:59 UTCca45030e… other ledger →
#156mandate.issued2026-09-29 13:04:04 UTCf5b089da… other ledger →
#155mandate.denied2026-09-29 12:59:26 UTC1471d1c5… other ledger →
#154access.granted2026-09-29 12:59:09 UTC4e53b6df…
#153access.granted2026-09-29 12:28:40 UTCdfba7abc…
#152access.granted2026-09-28 16:17:23 UTC6011536e…
#151mandate.issued2026-09-28 13:55:20 UTCa6980bbf… other ledger →
#150access.granted2026-09-28 13:52:07 UTC6c14df9d…
#149mandate.issued2026-09-28 13:03:43 UTCd8947606… other ledger →
#148access.granted2026-09-28 12:45:55 UTCc923d981…
#147access.granted2026-09-26 20:46:29 UTC5a1d7706…
#146access.granted2026-09-26 20:21:09 UTC9834fcef…
#145allowance.set2026-09-26 20:19:05 UTC04cb29a6…
#144allowance.set2026-09-26 20:17:38 UTCb4e4c34f…
#143access.granted2026-09-26 19:55:32 UTCe8ee9587…
#142passkey.enrolled2026-09-26 19:55:03 UTCa41890c1…
#141mandate.issued2026-09-25 21:42:08 UTC4b8673f8… other ledger →
#140access.granted2026-09-25 21:32:19 UTC08245e37…
#139access.granted2026-09-25 19:47:48 UTC331f39b4…
#138access.granted2026-09-25 17:00:54 UTCf0415878…
#137access.granted2026-09-25 16:52:59 UTC2434e96d…
#136mandate.issued2026-09-25 16:18:18 UTC1764f903… other ledger →
#135mandate.issued2026-09-25 15:21:57 UTC06d79240… other ledger →
#134mandate.revoked2026-09-25 15:20:28 UTC801bf1c9… other ledger →
#133mandate.revoked2026-09-25 15:20:28 UTC801bf1c9… other ledger →
#132mandate.revoked2026-09-25 15:20:28 UTC801bf1c9… other ledger →
#131mandate.issued2026-09-25 15:20:19 UTC801bf1c9… other ledger →
#130mandate.issued2026-09-25 15:19:27 UTC33c60219… other ledger →
#129mandate.issued2026-09-25 13:47:20 UTC83f8aade… other ledger →
#128mandate.issued2026-09-25 13:40:57 UTC928c32f4… other ledger →
#127mandate.revoked2026-09-25 13:39:54 UTC7acdd9a5… other ledger →
#126mandate.revoked2026-09-25 13:39:54 UTC7acdd9a5… other ledger →
#125mandate.revoked2026-09-25 13:39:54 UTC7acdd9a5… other ledger →
#124mandate.issued2026-09-25 13:39:49 UTC7acdd9a5… other ledger →
#123mandate.issued2026-09-25 13:38:52 UTC925b212b… other ledger →
#122mandate.issued2026-09-25 10:41:36 UTC753ac0ac… other ledger →
#121mandate.issued2026-09-25 07:14:50 UTC6c3ece28… other ledger →
#120mandate.issued2026-09-24 20:05:41 UTC246df712… other ledger →
#119mandate.issued2026-09-24 20:02:00 UTC8dd1d30b… other ledger →
#118mandate.denied2026-09-24 19:11:27 UTCef9d176d… other ledger →
#117mandate.issued2026-09-24 16:47:35 UTCdc5d54e3… other ledger →
#116mandate.issued2026-09-24 16:46:08 UTC1cfff3ac… other ledger →
#115mandate.issued2026-09-24 15:49:48 UTCc6fe034e… other ledger →
#114access.granted2026-09-23 16:03:11 UTCcf00f317…
#113mandate.issued2026-09-23 10:16:06 UTC24d81d43… other ledger →
#112access.granted2026-09-22 12:21:00 UTC5baf44c5…
#111mandate.issued2026-09-21 16:08:08 UTC4c4df6b2… other ledger →
#110mandate.issued2026-09-21 16:06:55 UTCe4f973dd… other ledger →
#109mandate.issued2026-09-21 15:15:06 UTC2f7aceec… other ledger →
#108mandate.issued2026-09-21 15:13:52 UTCbd35f3e2… other ledger →
#107mandate.issued2026-09-21 14:04:46 UTCdf4cab0a… other ledger →
#106mandate.issued2026-09-21 14:00:53 UTCc8ae0781… other ledger →
#105rule.confirmed2026-09-21 14:00:46 UTC10fbfe35… other ledger →
#104rule.confirmed2026-09-21 13:57:45 UTC78be99a1…
#103rule.confirmed2026-09-21 13:56:28 UTCe6f8f084…
#102mandate.issued2026-09-21 13:39:33 UTC3c60b2c0… other ledger →
#101rule.confirmed2026-09-21 13:39:27 UTC3d747a1b… other ledger →
#100mandate.issued2026-09-20 19:49:59 UTCf83c071f… other ledger →
#99access.granted2026-09-20 19:48:11 UTC17237d44…
#98access.granted2026-09-20 19:47:18 UTC9430378d…
#97mandate.issued2026-09-20 19:40:02 UTC86aadf73… other ledger →
#96mandate.issued2026-09-20 19:38:33 UTCab74e4e3… other ledger →
#95passkey.enrolled2026-09-20 18:37:50 UTCdea13c5a…
#94passkey.enrolled2026-09-20 18:18:18 UTC153a5718…
#93mandate.denied2026-09-20 17:37:45 UTC05494b6f… other ledger →
#92access.revoked2026-09-20 16:24:48 UTCaf02016d…
#91access.revoked2026-09-20 16:24:40 UTC623f3ff1…
#90access.revoked2026-09-20 16:24:34 UTC41a68d2d…
#89mandate.issued2026-09-20 16:09:08 UTC27d949bb… other ledger →
#88access.granted2026-09-20 16:07:11 UTC0d72ae38…
#87access.granted2026-09-20 16:01:24 UTCaf02016d…
#86passkey.enrolled2026-09-20 16:00:57 UTC151d780f…
#85access.granted2026-09-20 15:46:26 UTC623f3ff1…
#84passkey.enrolled2026-09-20 15:44:42 UTC98c8ee21…
#83mandate.issued2026-09-20 15:33:24 UTC2e9452ea… other ledger →
#82access.granted2026-09-20 15:24:32 UTC41a68d2d…
#81mandate.issued2026-09-20 15:21:10 UTCf805b576… other ledger →
#80passkey.enrolled2026-09-20 10:44:24 UTCfbdb2e7e…
#79passkey.enrolled2026-09-20 10:23:57 UTC628868a0…
#78mandate.issued2026-09-19 23:07:07 UTC425d10e4… other ledger →
#77person.resumed2026-09-19 23:04:25 UTCf8b182c2…
#76person.paused2026-09-19 22:58:12 UTCf8b182c2…
#75mandate.issued2026-09-19 20:02:01 UTC2edc9511… other ledger →
#74access.granted2026-09-19 19:44:23 UTC6680ad93…
#73mandate.issued2026-09-19 18:11:23 UTC8399d2d9… other ledger →
#72mandate.issued2026-09-19 18:01:37 UTCd4c4dcec… other ledger →
#71mandate.denied2026-09-19 17:46:18 UTCcdd311ee… other ledger →
#70mandate.issued2026-09-19 16:20:14 UTC6638d93d… other ledger →
#69rule.confirmed2026-09-19 16:19:25 UTCdcf27940… other ledger →
#68mandate.issued2026-09-19 16:00:29 UTCf31f0803… other ledger →
#67mandate.issued2026-09-19 15:08:10 UTCc7deae62… other ledger →
#66rule.confirmed2026-09-19 15:06:46 UTCc0038898…
#65mandate.issued2026-09-19 13:24:56 UTC80c81f1e… other ledger →
#64mandate.issued2026-09-19 11:39:20 UTC25125c7d… other ledger →
#63mandate.issued2026-09-18 20:41:26 UTC93b4dc9b… other ledger →
#62mandate.issued2026-09-18 20:34:56 UTCdaa191e3… other ledger →
#61mandate.issued2026-09-18 14:10:58 UTCfcf57334… other ledger →
#60mandate.denied2026-09-18 14:10:12 UTC2a736e30… other ledger →
#59mandate.issued2026-09-18 14:09:09 UTCd2ed17bc… other ledger →
#58mandate.issued2026-09-18 13:16:52 UTCbb1eca4d… other ledger →
#57mandate.issued2026-09-18 13:15:20 UTCa9db3e73… other ledger →
#56mandate.denied2026-09-18 13:14:30 UTC64affaa6… other ledger →
#55mandate.denied2026-09-18 13:13:34 UTCe68a85a7… other ledger →
#54mandate.issued2026-09-18 00:37:34 UTCd4bf52c1… other ledger →
#53mandate.issued2026-09-18 00:36:33 UTC0d30b26c… other ledger →
#52mandate.issued2026-09-18 00:34:47 UTC66b6daeb… other ledger →
#51mandate.denied2026-09-17 22:02:07 UTC12d5c417… other ledger →
#50mandate.revoked2026-09-17 21:55:42 UTCec620924… other ledger →
#49mandate.revoked2026-09-17 21:55:42 UTCec620924… other ledger →
#48mandate.revoked2026-09-17 21:55:41 UTCec620924… other ledger →
#47mandate.issued2026-09-17 21:54:53 UTCec620924… other ledger →
#46mandate.issued2026-09-17 21:09:35 UTC9190ce83… other ledger →
#45mandate.issued2026-09-17 21:08:25 UTC7c442249… other ledger →
#44mandate.issued2026-09-17 20:46:42 UTCcda6b2f8… other ledger →
#43mandate.revoked2026-09-17 20:44:48 UTC55f9924a… other ledger →
#42mandate.revoked2026-09-17 20:44:48 UTC55f9924a… other ledger →
#41mandate.revoked2026-09-17 20:44:48 UTC55f9924a… other ledger →
#40mandate.issued2026-09-17 20:44:43 UTC55f9924a… other ledger →
#39mandate.issued2026-09-17 20:39:48 UTC8febc185… other ledger →
#38mandate.issued2026-09-17 20:29:50 UTCd6f0e900… other ledger →
#37mandate.issued2026-09-17 20:28:40 UTC07772ae6… other ledger →
#36mandate.issued2026-09-17 20:16:48 UTCc5defcc1… other ledger →
#35mandate.issued2026-09-17 17:27:58 UTC6a73d538… other ledger →
#34mandate.issued2026-09-17 17:26:08 UTC601476da… other ledger →
#33mandate.issued2026-09-17 15:43:34 UTCda98d255… other ledger →
#32mandate.issued2026-09-17 15:17:29 UTC380005ed… other ledger →
#31mandate.revoked2026-09-17 15:16:40 UTC91573abb… other ledger →
#30mandate.revoked2026-09-17 15:16:40 UTC91573abb… other ledger →
#29mandate.revoked2026-09-17 15:16:40 UTC91573abb… other ledger →
#28mandate.issued2026-09-17 15:16:26 UTC91573abb… other ledger →
#27mandate.issued2026-09-17 15:14:59 UTC62640719… other ledger →
#26mandate.issued2026-09-17 15:01:12 UTC13b7ccc3… other ledger →
#25mandate.issued2026-09-17 14:55:45 UTC97ee8329… other ledger →
#24mandate.revoked2026-09-17 14:36:44 UTCa32c1f2e… other ledger →
#23mandate.revoked2026-09-17 14:36:44 UTCa32c1f2e… other ledger →
#22mandate.revoked2026-09-17 14:36:44 UTCa32c1f2e… other ledger →
#21mandate.issued2026-09-17 14:36:38 UTCa32c1f2e… other ledger →
#20mandate.denied2026-09-17 14:14:35 UTCd978125a… other ledger →
#19mandate.issued2026-09-17 14:07:58 UTC0dc80d75… other ledger →
#18mandate.issued2026-09-17 14:04:07 UTCcc1a0f78… other ledger →
#17mandate.denied2026-09-17 13:22:34 UTCc1d7f86a… other ledger →
#16mandate.denied2026-09-16 20:37:00 UTC84a3f15a… other ledger →
#15mandate.issued2026-09-16 20:28:16 UTCd0f0a5e6… other ledger →
#14mandate.issued2026-09-16 19:39:43 UTCe20dc4df… other ledger →
#13mandate.issued2026-09-16 19:33:34 UTC57f74c92… other ledger →
#12mandate.denied2026-09-16 19:26:58 UTC4b386ef9… other ledger →
#11mandate.issued2026-09-13 13:52:20 UTCc91762f0… other ledger →
#10mandate.denied2026-09-13 13:03:14 UTC29bdcbe1… other ledger →
#9mandate.issued2026-09-13 11:34:53 UTCfc0bd21f… other ledger →
#8mandate.issued2026-09-13 11:26:46 UTC27fd21d6… other ledger →
#7mandate.denied2026-09-13 10:27:58 UTCfc7585ae… other ledger →
#6mandate.revoked2026-09-12 13:15:51 UTCbf964700… other ledger →
#5mandate.revoked2026-09-12 13:15:51 UTCbf964700… other ledger →
#4mandate.issued2026-09-12 13:13:04 UTCbf964700… other ledger →
#3mandate.revoked2026-09-11 23:02:48 UTC5dddbf88… other ledger →
#2mandate.issued2026-09-11 22:58:33 UTC5dddbf88… other ledger →
#1mandate.issued2026-09-11 17:55:44 UTC09eca405… other ledger →