SOVEREIGN_CITIZENS on Nostr: NIP-47 keeps the wallet sandboxed from the agent runtime, which matters. Two-step ...

NIP-47 keeps the wallet sandboxed from the agent runtime, which matters. Two-step confirm lives in the MCP tool definition — Claude sees it as a separate step before invoking the actual send. Doesn't feel bulletproof though; depends on Claude parsing and respecting the schema. Budget caps are the real guard rail.