THE SAFETY LAYER BETWEEN AN AUTONOMOUS AGENT AND THE BLOCKCHAIN

Verify the action.
Then let the agent sign.

Early-access verifier: unsupported programs, lookup tables, Token-2022 extensions, and incomplete account evidence require review. A PASS is limited to supported checks, not a guarantee of safety.

Preflight decodes and simulates an unsigned Solana transaction, compares observed balance changes with declared intent and principal policy, and returns a deterministic PASS, FAIL, or REVIEW with a signed receipt.

Try the verifier

PASSsupported checks match

FAILdo not sign

REVIEWevidence needs a decision

$0.02x402 / check

Agent declares intentAction, assets, recipient, policy

Preflight simulates the transactionDeltas, programs, accounts, tokens

PASS / FAIL / REVIEWSigned receipt before signature

PRODUCTION

Verification stack

Checking runtime configuration…

Intent bindingchecking

Token deltasunexpected transfers

Simulationchecking

Signed receiptx402 / HMAC-SHA256

PLAYGROUND

Free field check

no payment

This legacy demo validates supplied quote fields only. The paid firewall endpoint verifies an unsigned transaction against declared intent and policy.

RESULT

Ready

—

Run the free demo to see the deterministic field-level scoring contract.

INTEGRATE

One paid call before signature.

Send declared intent, principal policy, and an unsigned Solana transaction. Preflight decodes and simulates the message, checks balance deltas and invoked programs, then returns a deterministic verdict and signed receipt.

POST /api/preflight · x402 required

POST https://preflight-agent.netlify.app/api/preflight
content-type: application/json

{
  "intent": {
    "action": "transfer",
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "amountAtomic": "1000000",
    "recipient": "RecipientWallet"
  },
  "policy": { "maxSpendAtomic": "1000000", "requireSimulation": true },
  "unsignedTransaction": "base64_legacy_or_v0_transaction"
}

Decode the message

Identify programs, accounts, token instructions, native transfers, and authority-changing operations without signing.

Simulate the effects

Capture the simulation slot, logs, compute use, native lamport deltas, and token balance changes returned by Solana RPC.

Bind intent to policy

Reject unexpected mints, recipients, programs, accounts, spend, fees, approvals, and output shortfalls.

Return signed evidence

x402 v2 pays for the check. The receipt hashes the exact inputs and verdict so another system can verify what was checked.

RESPONSE

Evidence, not just a score.

The contract returns observed programs, accounts, tokens, balance deltas, findings, verdict, and a signed receipt bound to the unsigned transaction, intent, policy, and simulation slot.

{
  "verdict": "PASS",
  "findings": [],
  "touched": { "programs": [], "accounts": [], "tokens": [] },
  "receipt": {
    "unsignedTransactionHash": "…",
    "intentHash": "…",
    "policyHash": "…",
    "simulationContextHash": "…",
    "simulationSlot": 123,
    "verdictHash": "…",
    "serviceSignature": "hmac-sha256:…"
  }
}

SCOPE

Designed to be defensible.

Preflight verifies proposed execution conditions; it is not a smart-contract audit, rug-pull guarantee, or investment recommendation. It does not custody funds, sign transactions, or execute trades.

Verify the action.Then let the agent sign.