Explicit transition from immutable local-key genesis ownership to an account. Signatures and account capability admission are separate verification layers.