Validates authoritatively and persists the filing. The instance id pins the catalog form and revision being submitted. The signature is stamped server-side from the authenticated session (signer identity, timestamp, IP, user agent) — the client supplies only the consent flag. The Idempotency-Key header is forwarded to the forms service, which requires it for safe retries.