Issue or verify a canonical human mandate checksum and deterministic action constraints, including signature trust-policy checks.