MetaMask is the permission surface
The workbench connects through the injected wallet when available, requests eth_requestAccounts, then asks for eth_signTypedData_v4 on the scoped spend package.
Project boundary
Smart Spend Sentinel turns agent spend into inspectable wallet permission.
It is a public judging surface for one concrete question: should this agent be allowed to buy this x402 resource under this wallet policy?
What a judge can verify
Smart Accounts Kit builds the delegation evidence
Each approved or blocked case shows the kit version, implementation, DelegationManager, EIP-7702 path, caveats, enforcers, and hashDelegation output.
1Shot is the execution packet, not a fake tx
Approved requests prepare a relayer-ready x402 packet with seller, resource, cadence, category, and max payment units. Live relay credentials are stated as a boundary.
Venice-compatible risk context is saved with the receipt
The policy route enriches the request through a Venice-compatible note when configured, or clearly labels local fallback mode in the UI and saved case.