- Purpose and suppression are current
- Bind every action to the original enquiry, current purpose, controller decision, channel, objection, suppression, local time, frequency, accessibility, retention and deletion; propagate restrictions across duplicates and recheck immediately before send.
- Property context remains source-bound
- Use durable property and listing identifiers, field-level source authority, effective times, versions and corrections; expose missing and conflicts, stop withdrawn content and protect private address, occupancy, access and negotiation details.
- Content and commercial identity are approved
- Version claims, sources, limitations, audience, purpose, language, accessibility, channel, disclosure, review, expiry and personalization envelope; never disguise promotion, impersonate a representative or manufacture availability, demand or urgency.
- Journey state is event-safe
- Validate event source, schema, identifiers and times, deduplicate and account for reordering and missing events, preserve unknown state, apply cadence and stop conditions deterministically and make sends idempotent.
- Routing ends in accepted ownership
- Build the eligible representative set from current authority, scope, conflicts and capacity, apply a reviewable distribution rule, transfer a minimum complete packet, require explicit acceptance and fence concurrent or abandoned outreach.
- Response and outcome states stay honest
- Separate provider acceptance, delivery, open signal, click, reply, reviewed intent, opt-out and resolution, suppress promptly and measure appointments and transaction states separately with service differences and causal uncertainty visible.