Provider security HMAC request signatures Timestamp drift guard (+/-5 min) Idempotency key for retries Provably fair verify endpoint