Local action preflight

Make trust programmable.
Keep enforcement honest.

Max amount USDCMax oracle age secMax slippage %Allowed protocols Require allowlisted recipient Require human governance approval

id, type, protocol, amount, oracle_age, slippage, recipient_allowlisted, human_approved

Evaluated-

Allowed-

Blocked-

Policy-

SHA-256 policy digestWaiting for compilation

Authorization decision log

Load proposed actions to begin.

Each proposed action will appear with independent guardrail results.

Enforcement boundaryA digest commits to policy bytes; it does not sign, enforce, verify identity, read an oracle, or execute on-chain.

Independent guardrails prevent one passing check from hiding a failed spend or freshness boundary.

Canonical policy bytes make later changes visible through a different digest.

Real enforcement still requires a trusted runtime or smart contract tied to identity and signatures.