Then a due-process rule: no federal citizenship list, database match, eligibility flag, or federal “approved citizen” product should affect a voter without individualized state-law process, notice, evidence, and cure. Then an interface audit: every federal portal, API, login, domain, cloud service, and vendor connection used by state agencies should be reviewed to determine who controls it, where data goes, what privacy policy governs it, what logs exist, and whether any routing changed after January 20, 2025.