Prepare exactly the destination and text supplied by the local user or trusted reply workflow. Never select another recipient or add content. The host enforces boot-fixed Ask/YOLO and exact pending approvals; a scenario cannot approve itself. Return the exact host receipt; never claim external delivery for a dummy channel.