The same gate every outbound channel passes: consent state, expiry, and suppression lists — evaluated live, never cached longer than seconds.