video1.0<iframe src="https://www.loom.com/embed/a7c207b5b09747dca8c2bdb9d87f775a" frameborder="0" width="1878" height="1408" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>14081878Loomhttps://www.loom.com14081878https://cdn.loom.com/os/loom-media-content/loom/dacd6cf3-6756-42f7-8db2-682272153efd/e0f52eb5-f567-4dce-900c-e21149ab67c3/sessions-thumbnails-a7c207b5b09747dca8c2bdb9d87f775a-59ef63e53295da17.gif/binary?authToken=eyJraWQiOiJtaWNyb3MtZ3JvdXAvdGRwLW9zLWFyY2hldHlwZS9xcGE2cG03NzRjbzIzZ2w1IiwiYWxnIjoiUlMyNTYifQ.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.WXjC91NdJlBSB3Hww5gScsGZnP0kM2nCHqdzvXQVEQKthIr_WAMwoITu0AzY40io-up83ymJJfFUbKJkNmJxzP_8yRbn4hrPn-YIYf7mLaCJzqZCgnonsrNmaaQFNzE2felfkuyb81vAMjP5yPMa2U9x2CPsiDJFJFxltKWzOqrj_dgTxjYzOsgEAHmvM7gEcMEplFQ1rX-sO7s-T5P2L2DYQhTUjuIpfBr5zZNeCpME0uDXM1RjLN8zu7EtLNInztFJSQ5ffABatSoiAJnFROXBzKBqkfiMwL7A6E0uGRPWoMROWk9erZ1jWRKus1_m9t4OEtjDNnaVLEMs0d96lQ&Expires=1794256486&Signature=GufhpYbYlEJjc4Qh2yfrOl76x7eze%7E7lzUGVLkMCZ5KUzDv5C0-eJSxwDdaUxiRIFcv00Rt5eGkXaANdj-Em3KANE%7EGptf5VUQfm20tGbs4VyN1jC7Z1F0nm%7ESceJHFpPsSRl90A2M3Wu%7EhiPvjb8V8TMrMeqqhomzLtM9xSEcDg3IiFaVR2DnH%7EVAD0Pcmj-RYf2wNfpoaFw%7ElmnJwtVk6T0Ai--Vh7pP3gePYrhS0Q-7wvO-L45%7EVJJwK9QOiyVCqrf0NPtfnYF2Qkciv4G0Hg%7EGocs%7EMG8WoeVtkNJpaF9ODH3FPLCDM9zKcOQcOUN-HKeY35eJHaXZCM7VrSew__&Key-Pair-Id=KQOSYIR44AIC0116.395This Loom explains how GuardMeta enforces authorization boundaries even when payment JSON is syntactically valid, preventing fraud. It describes how GuardMeta, not MUSE, gathers evidence, builds a dry run proposal, and uses Z3 to check immutable intent and policy, with deterministic demo records. In a simulated 42,000 dollar payment, MUSE makes seven evidence calls, 10 authorization rules pass, and GuardMeta returns SAT with a matching checkable intent. In two further scenarios, one detects separation of duties when Alice both approved and requested the payment, and another blocks a rolling exposure breach.