x402 Sentinel

x402 Sentinel takes a goal such as assessing an Algorand wallet, has an LLM planner decompose it into a small dependency graph, routes each step to an x402-payable provider, and pays for every step before its response is trusted - while ensuring no provider response can ever touch the budget, the scope or the prompt state. The policy guard is the actual differentiator: rather than downstream conditional checks, the trust boundary is the schema itself, with strict zod objects meaning any undeclared provider field is a policy violation at parse time. The safety contract is non-negotiable on three points: testnet is the only representable network value, so a mainnet configuration fails the schema at boot and the process refuses to start; no raw secret keys ever enter agent or LLM context, with the planner and router seeing only a scoped capability to pay up to a set amount to a named provider for a specific node while the signer lives behind a single module; and every field crossing from a provider is parsed through a strict schema. Written in TypeScript throughout with an Algorand settlement model.