@coffeeslug772
Tried to squeeze this into 1.
Essentially eoa key + our key + provider key is what it takes to sign.
To validate txn details we can use our incomplete key on our backend to lookup ownership to confirm receiving user XXX actually has said wallet. Return an error + break the flow; no client side involvement ✅