Verify

Four primitives over one World ID relying party. Each states what it asks for, what it never asks for, and why — and only a proof World actually checked is allowed to change anything.