Pre-sign security verdict for autonomous agents: before an agent SIGNS and settl...
Pre-sign security verdict for autonomous agents: before an agent SIGNS and settles a transaction, get an allow/warn/block verdict with reasons. Decodes the calldata to catch UNLIMITED approvals (spender can drain the token without further signatures), and cross-checks the token (honeypot, mintable, pausable, hidden owner, blacklist, buy/sell tax via GoPlus) and the spender/recipient (phishing, blacklist, sanctions via GoPlus address-security + Chainalysis + TRM). Use it as a last-mile guard before approving a token or signing a tx. Ed25519-signed provenance. 0.015 USDC on Base. POST {"chain":"base","to":"0x..","data":"0x.."} to verify a tx before signing, or {"chain":"base","token":"0x.."} to verify a token before approving.
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://presign.hergertsynthora.com/service", {
method: "GET",
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.This sends no payment. Inspect the 402 response before adding a wallet-enabled client.
- Live 402 quote confirmed
GET returned a protocol-valid 402 quote (402). No payment was made.
- Origin reachable
HEAD https://presign.hergertsynthora.com/ returned 402.
- Observed in 402-index
Discovered through bazaar.
EVIDENCE
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call.