EIP-712 the payer signs to authorize a release or refund

The exact LifecycleOrder typed data the escrow's payer must sign so the Facilitator accepts a release (or a refundInEscrow from the receiver). Read-only: it authorizes nothing and moves nothing.

release and refundInEscrow move money that is ALREADY deposited, so neither carries an ERC-3009 authorization — this order is what answers who may ask for the move. Policy is the Facilitator's: release is signed by the payer; refundInEscrow by the receiver, or by the payer once authorizationExpiry has passed.

Sign the typed_data with the wallet that funded the escrow and POST it back to /lifecycle-order (or send it as lifecycle_order in the approve body). The order expires in 10 minutes: it authorizes one move, not a standing permission.