Declare a network-link intent (inert until realized); favor-build spends obligation and emits quiet Physical; forged work orders inject a false- source message and complete via an unwitting builder; robot stub is louder physical-by-proxy. Completion adds a reach edge and bridges air-gaps. Save v10; both frontends and agent mode expose the verbs; proposed intents render as dashed ghosts. Defense: constitution "Building: intent and actuators" and "No disembodied hands" — every effect names its actuator; no new build subsystem; signatures follow the hands that did the work. Co-authored-by: Cursor <cursoragent@cursor.com>