Sender-Constrained Credentials and Audit Receipts

Eligible on Monday, unlawful by Tuesday: authorization has to move to execution time

A zero-trust design for collection actions puts a 30-second, single-use permit in front of every dialer and SMS worker. The interesting part is what it does when the facts disagree.