Every write must identify an actor, authority, object, previous state, next state, expiry, replay identifier, and signatures.
Define the object, allowed states, transition authority, invariants, fees, and recovery behavior.
Use SiloID-bound wallet or registered service authority. Never send service credentials to a browser.
Treat uncertain submission as pending, query by idempotency key, and trust finalized receipts.