原推：ERC-4337, and its predecessor EIP-2938, do this by enshrining a split between “validation” and “execution”.
The validation step is bounded in how much gas it can consume, and cannot use “forbidden opcodes” that access state outside the account. If an op does this, it is rejected
https://twitter.com/VitalikButerin/status/1576199526251012096