Paper-only execution, enforced in code. Accounts are created by invitation; public registration is disabled.