Bearer payment in runs and wallet vault
When creating a run, the Cx can attach an anonymous bearer note (new, from the balance, or a token from the vault); it travels in the same hotspot bundle as the data, sealed for the Dx only. On opening, the Dx chooses to validate it on the chain or keep it in the vault, with no time limit.