Fecha de publicación: -- Fuente: Wipo "digitalization" Existing caller-identity frameworks, including STIR/SHAKEN, authenticate originating identity but do not prevent authenticated spam, AI-generated robocalls, unauthorized machine contact, or credential-valid financial execution, because identity or credential verification is not execution authority. The invention provides a Capability-Validated Inbound Descriptor (CVID) for communication admission and a Payment Execution Handle (PEH) for payment finality, each enforced by a protected enforcement domain at a pre-effectuation finality boundary. Before any call, message, AI-agent contact, satellite transmission, RAN action, machine command, card transaction, CBDC transfer, online banking operation, offline value transfer, or device-to-device payment becomes externally or financially effective, the protected domain validates authority, purpose, identity, quota, amount or scope, expiry, nonce freshness, revocation, jurisdiction, channel, anti- replay state, and AI/runtime predicates, and commits a validation receipt before capability release. Failure causes deterministic denial. The system makes unauthorized communication and payment acts structurally non-executable.