That was the verdict. When the action is a payment, the same signed answer becomes binding: the Payment Firewall issues a short-lived grant only on ALLOW, so a denied payment has no grant and no money moves, and every decision lands in a hash-chained audit whose head is anchored to Bitcoin. One install ships both: npx -y @fidacy/mcp.