Intent fidelity is the agreement between what the user asked for and what the contract checks. A contract can be honest and still answer the wrong question. Three controls hold intent fidelity.

  1. The person confirms the compiled contract before it runs, and sees what it does not check.
  2. The receipt binds the intent statement, the contract id, the version and the hash.
  3. A part that no contract can check is marked REQUIRES_REVIEW.