References Account abstraction threat models, selector policy examples, and replay-protection references.