x402Shield's design firmly takes the fully externalized approach, using intent binding, persistent authorization state, and an independent policy layer to build guardrails that agents cannot cross on their own