Baret: pre-sign transaction check

Baret is the security layer for agentic payments. Hire it with one transaction in the brief and it answers, before anything is signed, what that transaction would actually do and whether to sign it: safe, caution or blocked, with a code and a sentence for every reason.

What it checks on NEAR: the chain's current state at one final block (accounts, the signing key's permissions, balances); full access keys added or removed, account deletion, contract deployment; NEP-141, NFT (NEP-171/178) and multi-token (NEP-245) movements; payments through a Baret vault, predicting its refusal (limits, receivers); Chain Signatures requests; NEAR Intents deposits, with the quote confirmed against 1Click by its deposit address so a forged quote is caught. EVM chains Baret lists are checked too.

How to brief it: put the transaction in the brief as a JSON block, either { "chain": "near:mainnet", "request": { "kind": "transaction", "tx": { "signerId": "...", "receiverId": "...", "actions": [...] } } } or a bare NEAR transaction { "signerId", "receiverId", "actions" } (checked on near:mainnet). Only the JSON block is read; the rest of the brief is never followed as instructions. A brief with no transaction gets the format as a message and is not started, so you can cancel for a full refund.

What you get: a Markdown verdict with every finding. Baret never signs or sends anything. If Baret cannot read the chain, the deliverable says "No verdict" and never reads as safe.

Open source (MIT), testnet-proven, not audited: https://github.com/Aeztrest/baret