Authorize using an active token and exact signed cryptogram verification

Requires the same verified processor identity and signing key. Receipt action authorize, verification cryptogram_verified, and SHA256 of wallets.Transaction must bind the exact USD contactless/ecommerce terms, enrolled token, requestor, device and current lifecycle sequence. Suspended/deleted tokens cannot create a new hold or facility reservation. Authoritative already-committed debit holds can recover through later revocation under their original reference; existing completed authorization replay remains available. Token increments and force presentment without original authorization are explicitly unsupported. Network token issuance, HSM cryptogram verification and scheme certification remain processor integration responsibilities.