Security Invariants

INDEXLA must guarantee:

1. User custody is never transferred to INDEXLA.
2. AI cannot directly execute.
3. Unauthorized execution cannot occur.
4. Revoked permissions cannot execute.
5. Expired permissions cannot execute.
6. Spending limits cannot be bypassed.
7. Destination restrictions cannot be bypassed.
8. Strategy scope cannot be bypassed.
9. Replay cannot execute.
10. Invalid data cannot trigger execution.
11. Duplicate triggers cannot duplicate execution.
12. DEGRADED sessions cannot silently execute.
13. Privacy cannot bypass security.
14. Unsupported chains cannot claim production security.
15. Provider failure cannot expand authorization.