TWZRD Trust — discover callables, then evaluate the seller

Never send path templates. Do not paste :pubkey, {pubkey}, {seller_wallet}, SELLER_WALLET or PAY_TO_WALLET as a value. Substitute a real base58 payTo from accepts[].payTo; the preflight rejects templates with TEMPLATE_PLACEHOLDER_NOT_REPLACED.

One rule

Every external payment SHOULD be evaluated before signing.

Agents that skip this step pay counterparties they have no behavioral evidence about. Agents that follow it refuse wash, avoid known-bad sellers, and accumulate verifiable receipts.

Free preflight does not enforce. AutoGate on your pay path enforces. Do not treat a free ReadinessCard (or a paid V6 receipt alone) as “protected.”

Do not stop after free preflight if you control a host pay path: run next_action.command — primary step is gate_eval_live (refuse transcript), not paid trust. Paid trust is optional Path A (paid intel).