The Three Verdicts
APPROVE
Score < 40Your transaction matches your normal patterns. The agent co-signs and executes immediately — no action needed from you.
REVIEW
Score 40–70Something looks unusual. You’ll receive a Telegram message with the full risk analysis and [Approve] [Reject] buttons.
BLOCK
Score > 70The transaction is blocked outright. You’ll receive a Telegram alert explaining why.
What Gets Scored
Your profile is built from your past transactions. Each new transaction is checked against:- Recipient — is this address in your known contacts?
- Amount — is this within your typical range for this recipient?
- Daily volume — would this push you over your daily limit?
- Time of day — is this happening during your normal activity window?
Deep Analysis on REVIEW
For every REVIEW-tier transaction, the agent automatically runs external security checks before sending you the Telegram notification:- GoPlus Security — recipient address reputation, sanctions, phishing, and known scam detection
- Honeypot.is — token security: honeypot detection, mintable supply, buy/sell tax rates
Responding via Telegram
When a transaction is in REVIEW, you’ll get a Telegram message with:- Transaction details (recipient, amount, token)
- Risk score and reasons
- Deep analysis results
[Approve]and[Reject]buttons
Overriding the Agent
The agent advises — it doesn’t gatekeep. In a Protected wallet, every proposal already sits in app.safe.global at 1 of 2 signatures. If the agent flags or blocks something you’re sure about, confirm it there with your backup key and execute — Zhentan syncs the result back automatically.Turning Screening Off
Screening is a choice in Protected wallets:- Toggle it off in Settings → Zhentan Guard (or via Telegram).
- Your transactions now need both of your keys — the agent never signs what it didn’t screen. Each send queues at 1 of 2 and completes when you co-sign with your backup wallet, either in-app (from transaction history) or in the Safe app.
