Token boundary
Never bundle a control or provider key. Mint an application-bound token server-side with feedback:write/teach:write only and a short expiry.
Feedback
Send reject, edit or teach against the traceId. Mobile evidence lands in the same project Teach Inbox; it does not mutate the active Behavior directly.