EP enforces trust at the action level — not the session level. These are the domains where that distinction matters most.