This original, runnable module exercises an outbound-action boundary using synthetic inputs and Node.js built-ins. Its 15 checks cover exact-content approvals, expiry, duplicate actions, pause behavior, immutable snapshots and audit-log data minimization. The local run passed 15/15 checks with zero external calls.