SignUpTask.Parse validates data_headers.udid against Certification.Udid; mismatch discards the response. Sourced from the same mappedUdid the translation middleware uses to decrypt — never controller state. Other endpoints carry the extra key; SignUpTask is the only reader. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>