"Ghosts of Departed Proofs" for TypeScript: sensitive functions require a compile-time proof object (for example, that a user is a project admin), so a missing authorization check fails type-checking. No runtime cost; ships ESLint and Oxlint presets that block forged proofs.