Validate revocation authority separately from x402 payment and prepare bounded propagation to opted-in verified targets.