Read-only Solana financial-action firewall: decode and simulate an unsigned transaction, bind observed effects to declared intent and policy, and return a signed PASS/FAIL/REVIEW receipt