Enforce 2-of-3 human approval and a transaction-policy engine INSIDE an AWS Nitro Enclave before a blockchain key signs. The enclave decodes ERC-20 calldata and judges the real recipient/amount, and the approver set is baked into PCR0 — so a compromised backend can neither bypass consensus nor inject a fake approver. KMS attestation gates key use