Blockchain cant enforce authority, it only records whatever the off-chain gate already allowed.

When we were wiring a payout path through our relayer, the scary bit turned out not to be the signature check, it was the stale policy blob sitting in the worker cache (same address, wrong rail, very different outcome). I ended up pinning the intent hash and the policy version separately, because the first time we replayed a dry run from logs the execution looked fine right up until the nonce table had already moved on....