ChangeMandate

Deterministic authorization-diff primitive that determines whether post-purchase transaction changes require new authorization.