The mission portion of every transaction is physically segregated — on payment, the 1% mission cash moves out of general balance into a dedicated Mission Fund account with tracked transfers, and refunds reverse it. Its balance is independently queryable and covered by its own invariant. The mission money is real and set apart, not an accounting label.