"trust the hooks via 255" — payload signed client-side, verified server-side; flip one byte and watch it get rejected.