Before launch, we test every workflow in a sandbox: opt-in, opt-out, keyword responses, quiet hours, and failure paths. Post-launch, we maintain detailed logs of sends, failures, and replies for audit and troubleshooting. This is not legal compliance; it's operational transparency.