Catch recipient or amount mutation before signing

Prompt injection can change a tool argument after approval. Tollary decodes the official Base USDC call and compares recipient, amount, chain, selector, native value, expiry and fee limits with the owner-signed mandate.

npx tollary inspect --source guide-address-mutation
npx tollary lint --input ./guard-request.json --source guide-address-mutation

Keep the mandate issuer outside the untrusted agent runtime, and stop on BLOCK or unavailable evidence.

Base Sepolia testnet only. This cannot detect compromise of the mandate issuer, signer, client, or every application-layer attack.

Verification model · Schema · Legal