420 Swap security

Verify asset identity instead of relying on symbols. Confirm route/market eligibility, amount bounds, minimum output and transaction destination before signing.

Fail closed on stale quotes, wrong-network state, disabled routes, unhealthy markets, stale oracle references or excessive deviation. Do not approve arbitrary unlimited spending to bypass a failed trade.