Web Crypto builds a SHA-256 fingerprint of the business license and power of attorney in the browser; files stay local, and the Iran-origin one-strike reject is wired into the check.