SentryAgent

Each job is isolated by a unique auto-incremented jobId. No shared mutable state between jobs — one job's data cannot affect another's execution path.

Job structs are stored in a mapping(uint256 → Job). Access to any job requires its exact jobId — no iteration, no enumeration of foreign jobs.

All inputs validated via Solidity custom errors before any state change: ZeroAddress, InvalidExpiry, InsufficientFunds, InvalidJobStatus.

State changes are atomic per transaction — a job either fully transitions to the next status or the entire call reverts. No partial state is possible.

SentryAgent is a pure on-chain contract — it has no LLM, no prompt parsing, and no natural language input surface. Prompt injection attacks have zero attack surface.

All inputs are Solidity-typed (address, uint256, bytes32) with custom error reverts. Malformed inputs are rejected at the EVM level before execution.

Checks-Effects-Interactions pattern enforced across all fund-release functions — no external calls before all state mutations complete, preventing cross-function injection via callbacks.

The contract contains no delegatecall — eliminating the entire class of storage-collision and context-hijacking attacks associated with proxy patterns.