Tier 4 Static Scanner: Enforces that state-changing domain operations and receipts are never created directly bypassing Ex4pm.Evidence.BRCE.