The report
PACE starts from a useful security assumption: the LLM controlling a wallet may be wrong, manipulated or compromised. Instead of asking the model to obey policy, the system converts proposed actions into typed intents and checks them with deterministic policy logic.
Approved actions are bound to a signed Policy Decision Record and exact execution bytes, with expiration and replay protection enforced by the smart account. Across 2,800 deterministic benchmark trials, the authors reported zero unsafe executions.
That is logic-level benchmark evidence rather than production proof, but the architecture is important because it moves authorization outside the model.
The Bankr/Grok transfer illustrates the related failure mode in which untrusted language was promoted into transaction authority. PACE proposes a deterministic decision barrier against that class of handoff; its benchmark does not establish that PACE would have prevented the Bankr incident.