Issuer boundary
Enrollment
Enrollment is the one flow where the issuer observes the Stellar address and checks testnet eligibility.
Disclosure
Before Freighter connects, the UI must state that the issuer sees the address, the credential is stored locally, and losing browser data requires re-enrollment.
Wallet rules
Require Stellar Testnet. Use Freighter for address access and message signing. Never request or store a secret key.