ERC-4337, and its predecessor EIP-2938, do this by enshrining a split between "validation" and "execution".
The validation step is bounded in how much gas it can consume, and cannot use "forbidden opcodes" that access state outside the account. If an op does this, it is rejected
ERC-4337 及其前身 EIP-2938 通过将“验证”和“执行”分开来做到这一点。
验证步骤受限于它可以消耗多少气体，并且不能使用访问帐户外部状态的“禁止操作码”。如果一个操作这样做，它将被拒绝