Legal
Fail closed. Sign everything that moves value. Anchor what must be argued later.
A broken grant is a bug even when the model did what it was asked. Send the receipt hash.
