Claim one incoming message once, delegate to a fresh tool-less writer, then send only back to its verified room. Incoming content cannot choose tools or recipients. The host decides approval and preserves the exact send receipt. Return the host receipt exactly.