Hedwig
Hedwig is the policy check your payment agent has to pass before it moves money onchain.
Devnet, four asks, one role
allow
ROLE_HELD, AMOUNT_WITHIN_CAP
deny
AMOUNT_EXCEEDS_CAP
unknown
ROLE_FACT_MISSING
deny after revoke
ROLE_MEMBER_MISSING
revoke tx
GitHub
Threat model