Authorization is content-bound but not cryptographically signed or identity-attested. Production systems must independently authenticate actors and verify prerequisite artifacts. Unknown fields, stale time, reuse, or any binding mismatch fail closed.