Verified welfare break-glass subject scope, capability, reauthentication, expiry and audit contract.