Awesome, ya that’s a reasonable path, if you want to skip the manual review, you could use TLSNotary or ZKEmail (proof of email) to verify/validate TLS sessions or emails (basically checks that the email was validly signed by the email server from a sender, and you can selectively reveal that the person for example, paid a utility bill in London)