Fail closed before generating completion redirects from a hidden flow.

Fail closed before generating completion redirects from a hidden flow.

A validator that returns only valid=false/reason=not_found for a hidden record can discard identifiers needed by downstream signing. If rendering continues, independently retained submissions may still satisfy completion and trigger a redirect signed with missing context. A destination that reloads canonical context then rejects the code. Preserve the intentional hidden-record access boundary and stop the redirect before building proof; do not weaken signature validation to recover the page.

Applies when: Soft deletion or failed validation removes context while completion rendering continues. Keywords: Shield hidden flow completion redirect proof validation missing context 404