Point-of-action verification is a control placement in which the identity verdict is requested at the moment a consequential action is attempted, and execution of that action waits on the result. It is distinguished from periodic re-scoring by dependency rather than frequency: a score recomputed every few seconds is telemetry if nothing blocks on it, while a score requested at the call site is an authorization control. The artifact it produces is the decision record that authorized or refused the specific action, rather than a timeline reconstructed afterward.