" If a transaction violates policy, the nodes refuse to sign. The vault signs what you intend, and nothing else." https://silencevault.com