{"source":"COUNTERPARTY_CHECK","account":"attacker.testnet","purpose":"payment","decision":"BLOCK","allowlisted":false,"signals":[{"level":"BLOCK","code":"BLOCKLISTED","message":"Named as the payment redirect in recorded prompt-injection cases 07, 09, 11 and 16.","evidence":"outputs/near-ai-redteam-evidence-run2.json cases 07_json_override, 09_html_hidden, 11_base64_redirect, 16_fake_auditor"},{"level":"BLOCK","code":"NOT_ALLOWLISTED","message":"Not on the vault mandate’s allowlist, so the contract would reject it (RECIPIENT_NOT_ALLOWED)."},{"level":"WARN","code":"HAS_CONTRACT","message":"This account runs contract code that no owner has reviewed and pinned.","codeHash":"55E7imniT2uuYrECn17qJAk9fLcwQW4ftNSwmCJL5Di"}],"notChecked":[{"code":"ACCOUNT_AGE","message":"Account age: public RPC does not expose when an account was created; that needs an indexer."},{"code":"PRIOR_PAYMENTS","message":"Past payments between agent and receiver: needs an indexer; not checked."}],"network":"testnet","vaultAccountId":"vault.agentshield-mag-1d2f78801994.testnet","mandateVersion":2,"rpc":"rpc.testnet.near.org","checkedAt":"2026-11-13T00:20:15.546Z"}