State an intent in plain English. WalletChat plans it, simulates it against live chain state, and shows the exact balance diff — nothing signs until the guardrails pass and you arm it.
Nothing is signable unless it simulates successfully against live chain state. There is no bypass path.
Balances are decoded from real post-simulation state — token layout, decimals, fees, rent — down to the last unit.
Spend caps, a program allowlist, slippage ceilings and staleness checks must all pass before the confirm control arms.
Every plan prints as a verification slip: the route, the signed deltas, fees, and an inspection stamp. It reads like a receipt for something that hasn't happened yet — so you decide before it does.