Protocol and gateway acting as a consequence firewall for machine actions, verifying exact authority before money, code, permission, or infrastructure changes and producing independently verifiable receipts.