[rudimentall1]

What changed

• Normalize exact ActionIntent amounts at the SQLite boundary so Python Decimal values are never passed directly to SQLite.
• Serialize amount_exact as a decimal string in audit JSON.
• Compare the signed exact amount and compatibility amount safely against effective authority limits using Decimal, not mixed string/float comparisons.
• Fail closed if the two amount representations diverge or either amount/limit is invalid.
• Add regression tests for SQLite persistence and effective-authority checks with decimal strings.

This fixes the PortalDot local integration path. The demo remains isolated to loopback with disposable storage and keys; no RPC call or transaction broadcast is involved.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.