KushBitx Preflight
One check before money moves: simulates the unsigned transaction, decodes approvals and transfers, screens the token and the recipient or spender, and applies a protected SpendGuard policy when given. One verdict: ALLOW, REVIEW or BLOCK, with sourced findings. Fail-closed: no ALLOW unless every required check ran. Each verdict is bound to the exact transaction (transactionDigest) for 60 seconds.
Does not detect prompt injection. Bound what an agent can pay with Protected SpendGuard, a server-side policy the model cannot change.
POST /api/preflight