Problem: PSBTv2 permits outputs to be added before inputs.
An authenticated descriptorprocesspsbt request can abort the node while updating metadata for one of those outputs because UpdatePSBTOutput() traverses its script with a signature creator for input 0.
ECDSA signing or a miniscript timelock check can then access the missing input.
Fix: Make MutableTransactionSignatureCreator reject ECDSA and Schnorr signing and MuSig2 operations when its input index does not exist, and return a rejecting checker for transaction-bound conditions.
Output metadata traversal still records scripts and key origins, allowing outputs to be updated before inputs are added.