Display and contact preferences remain separate from actor authority.
Purchase, request, escrow, dispute, and review updates stay human-readable.
Browser sessions can be revoked without touching purchases.
Data export and deletion request paths respect legal hold and audit requirements.