feat: check AML risks

Cargo.toml

@@ -5,6 +5,7 @@ split-debuginfo = "packed"
 
 [workspace]
 members = [
+  "magicblock-aml",
   "magicblock-account-cloner",
   "magicblock-accounts",
   "magicblock-accounts-db",
@@ -92,6 +93,7 @@ magic-domain-program = { git = "https://github.com/magicblock-labs/magic-domain-
   "modular-sdk",
 ] }
 magicblock-account-cloner = { path = "./magicblock-account-cloner" }
+magicblock-aml = { path = "./magicblock-aml" }
 magicblock-accounts = { path = "./magicblock-accounts" }
 magicblock-accounts-db = { path = "./magicblock-accounts-db" }
 magicblock-aperture = { path = "./magicblock-aperture" }

config.example.toml

@@ -250,6 +250,42 @@ remove-confined-accounts = false
 # Env: MBV_CHAINLINK__RESUBSCRIPTION_DELAY
 # resubscription-delay = "50ms"
 
+# ------------------------------------------------------------------------------
+# Optional: Range Risk API validation for post-delegation actions
+# ------------------------------------------------------------------------------
+# When enabled, all addresses referenced by post-delegation actions are checked
+# against Range API before actions are allowed to execute.
+[chainlink.risk]
+# Enables/disables Range risk checks.
+# Default: false
+# Env: MBV_CHAINLINK__RISK__ENABLED
+enabled = false
+
+# Range API base URL.
+# Default: "https://api.range.org/v1"
+# Env: MBV_CHAINLINK__RISK__BASE_URL
+base-url = "https://api.range.org/v1"
+
+# Range API bearer token.
+# Default: None
+# Env: MBV_CHAINLINK__RISK__API_KEY
+api-key = "your-api-key"
+
+# Cache TTL.
+# Default: "30 days"
+# Env: MBV_CHAINLINK__RISK__CACHE_TTL
+cache-ttl = "30 days"
+
+# HTTP timeout for Range API calls.
+# Default: "5s"
+# Env: MBV_CHAINLINK__RISK__REQUEST_TIMEOUT
+request-timeout = "5s"
+
+# Risk score threshold to consider an address high risk, on scale of 0-10.
+# Default: 5
+# Env: MBV_CHAINLINK__RISK__RISK_SCORE_THRESHOLD
+# risk-score-threshold = 5
+
 # ==============================================================================
 # On-Chain Registration (Optional)
 # ==============================================================================

magicblock-aml/Cargo.toml

@@ -0,0 +1,28 @@
+[package]
+name = "magicblock-aml"
+version.workspace = true
+authors.workspace = true
+repository.workspace = true
+homepage.workspace = true
+license.workspace = true
+edition.workspace = true
+
+[lib]
+name = "magicblock_aml"
+path = "src/lib.rs"
+
+[dependencies]
+futures-util = { workspace = true }
+magicblock-config = { workspace = true }
+reqwest = { workspace = true, features = ["json"] }
+rusqlite = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
+solana-pubkey = { workspace = true }
+thiserror = { workspace = true }
+tokio = { workspace = true, features = ["sync", "time"] }
+tracing = { workspace = true }
+
+[dev-dependencies]
+tempfile = { workspace = true }
+tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }