Security and privacy

Never trust an alert as authorization. Verify network/source and review any resulting action in Wallet. Delivery infrastructure must minimize correlation between wallet identities and external push endpoints and must exclude private message content, private Identity fields, encrypted Resource payload plaintext and raw Attention telemetry.