Authorization Payload Linter

Reads an authorization payload before a key touches it, and reports how that payload stands against a signing policy you declare. Three declared modes. In typed_data the input is the EIP-712 object your wallet would receive from eth_signTypedData_v4. In eip7702_tuple it is a delegation tuple of chain id, delegate address and nonce. In raw_hash it is a bare 32-byte hash about to be signed blind, which raises BLIND_SIGNATURE and stops, because nothing about what is being authorized can be read from it. Classification is string equality of the computed EIP-712 encodeType against canonical type strings, so a struct carrying a known name with a different member list comes back as LOOKALIKE_TYPE and an unknown struct comes back as UNRECOGNIZED instead of a guess. Every check returns FLAGGED, CLEAR or NOT_EVALUATED with the field path, the observed value and the policy value. There are no numeric defaults on this page: every threshold, allowlist, counterparty set and clock reading is yours, and a check whose input you did not declare reports NOT_EVALUATED and is listed separately. This tool performs no chain read, recovers no signer, computes no digest, and never submits anything.