US agencies are formalizing identity checks at the issuer gate while leaving the transfer layer politically exposed.