The report
PACE starts from a useful security assumption: the LLM controlling a wallet may be wrong, manipulated or compromised. Instead of asking the model to obey policy, the system converts proposed actions into typed intents and checks them with deterministic policy logic.
Approved actions are bound to a signed Policy Decision Record and exact execution bytes, with expiration and replay protection enforced by the smart account. Across 2,800 deterministic benchmark trials, the authors reported zero unsafe executions.
That is logic-level benchmark evidence rather than production proof, but the architecture is important because it moves authorization outside the model.