Answer Lingara's signed app.render and app.action requests with a card: verification by the lingara library, a Rack endpoint, and card and manifest builders that refuse what Lingara would clamp.