Ownership check

Also written: owner, owner defense

A check in code that a tool only touches orders belonging to the verified sender, answering "no such order" otherwise. The sender's identity comes from the verified address, never from the email text.