Falcon Shield: check a Solana tx before signing
shield_guard_checkUse this before an agent or wallet signs a Solana transaction. Decodes the unsigned or signed transaction and returns NO_MATCH (no known-bad pattern matched; not a safety guarantee), WARN, or BLOCK, with plain-language reasons and a signed receipt. Pass an x402 quote to also check a payment transaction against it (overpay, approve-instead-of-transfer, unchecked Transfer, wrong payee). Errors return ERROR and are never charged. Price $0.009 USDC (x402, Solana).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tx | Yes | Base64 wire transaction (also accepts an RPC getTransaction result). | |
| caps | No | Optional spend caps you declare; any violation returns BLOCK. Keys: max_amount (int base units per outflow), max_amounts ({mint|'SOL': int}), max_total (int per asset), allowed_payees ([pubkey]; owners' ATAs match), allowed_assets ([mint|'SOL']), allow_approvals (bool, default false). | |
| quote | No | x402 quote the tx pays: {asset, amount, pay_to | pay_to_token_account, decimals?, token_program?}. | |
| strict | No | Escalate HIGH-risk token approvals (unlimited or third-party delegate) from WARN to BLOCK. Default false. | |
| wallet | No | Your own pubkey; only this key is treated as 'you'. | |
| simulate | No | Simulate against Solana mainnet (Helius RPC, sigVerify off, recent blockhash replaced, never submitted). Default true; false = static checks only. If simulation fails the verdict is at least WARN, except plain System/Token/ATA/ComputeBudget/Memo transactions with no unresolved lookup tables, which are fully decoded statically. Third-party unlimited approvals BLOCK by default. Response includes risk_score (0-100), basis (simulated|static) and top_reason. | |
| cap_base_units | No | Hard per-payment cap enforced even if the quote asks for more. | |
| known_addresses | No | Optional: pubkeys you have recently paid or received from. A recipient that only looks like one of these (same first/last characters) is flagged as address poisoning. |