TheSentinel Layer

// src/contracts/RiskRouter.sol
function authorizeTrade(TradeIntent calldata intent, bytes calldata signature) external {
    // 1. Verify deadline
    require(block.timestamp <= intent.deadline, "RiskRouter: Intent expired");
    
    // 2. Verify circuit breakers
    uint256 currentVolume = agentVolume[intent.agentId];
    require(currentVolume + intent.volume <= maxVolumePerInterval, "RiskRouter: Volume limit exceeded");
    
    // 3. Update state to prevent replay
    agentVolume[intent.agentId] += intent.volume;
    executedIntents[intent.id] = true;
    
    // 4. Verify signature (EIP-712)
    address signer = _verifyIntentSignature(intent, signature);
    require(signer == agentOwners[intent.agentId], "RiskRouter: Invalid signature");
    
    emit TradeAuthorized(intent.id, intent.agentId, intent.pair, intent.volume);
}