
The callback that approves a payment
The face and the voice confirming the instruction are exactly what an attacker can now fake. Ask the expected person to prove they are present instead.
Video meetings with the identity question settled at the door. Nobody joins without reading the chip in their own government document and matching a live face to the portrait inside it.

The door
A ZOREAL room has no anonymous join and no dial-in number. Everyone waiting to be let in arrives with a proof already made, and the host sees who they are rather than how many of them there are.
The waiting room names the person and what their identity was checked against.
No phone leg: an unidentified caller contradicts everything else on the screen.
The host chooses how much proof the room asks for, from anyone verified to admitting each person by hand.

Proof of presence
On the call where an instruction is about to be trusted, you can ask again. Any participant can be asked to prove they are live, right then, and the request is a control on the bar rather than an item under a menu.
A room can require it of everyone before the meeting starts.
A host can ask one person for it in the middle of a call.
The answer is a fresh check, not a badge someone was assigned when they arrived.

The roster
The participant list is the room's own record of who is present and what each person proved. When recording and transcription arrive, anything that reads the call joins as a participant and appears here as itself, visible to everyone rather than to the host alone.
A member of a room can be enumerated by every client in it. A policy flag can be flipped quietly.
Recording and transcription are two separate decisions, and neither is in the first release.

Consent
Recording changes what a call is, so it is not a switch somebody flips mid-conversation. A room is created to be recorded or it is not, everyone in it can see that it is, and the indicator reports membership rather than promising a policy.

Every one of these already happens on a video call. What changes is whether the people on it had to prove they were people.

The face and the voice confirming the instruction are exactly what an attacker can now fake. Ask the expected person to prove they are present instead.

A synthetic candidate can hold up long enough to reach payroll and internal systems. Bind the interview and the account to one verified human.

When the call is the record of who agreed to what, the identity of everyone in it is part of the record.

A session where every attendee is a verified person, and the questions come from people.

Meeting someone new is the case where a name proves nothing at all, and the one where being wrong costs the most.
Nobody joins a ZOREAL meeting without a government document check and a live face behind their name.
The questions that decide whether this is the right room for the call.
Add a human proof before access, approval or action. Keep the interaction fast, and keep unnecessary identity data out of it.