A small axum service in front of Tranquil's delegation API. It verifies the caller's service auth, enforces the verified-email and delegate-count policy, then forwards to Tranquil with its own credentials. Configuration goes through Confique, with env vars taking precedence over an optional TOML file, and the signing key is published at /.well-known/did.json.