Dual-party handshake escrow
A credit transaction locks on intro request. It releases to the connector only when *both* the requester and connector confirm the intro landed. Either party can mark the connection failed; an unanswered confirmation auto-refunds after a configured window.


