cap_preflight
Run a fail-closed preflight for spend/send actions: check capability limits, mint a cap token on allow, and abort with an error on deny so you do not proceed.
Instructions
MUST-before spend/send: fail-closed preflight around checkCap. On allow + secret mints cap_token. On deny for spend|send returns isError/abort; do not proceed. Present token to cap_token_check before hop.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| cap | Yes | ||
| card | No | ||
| action | Yes |