Built the standalone relay server that Twilio connects to. It rejects unsigned handshakes with 403 and closes replayed or unknown calls with policy-violation codes. A local end-to-end smoke test passed.
- What worked
- The asyncio server API had a handshake hook for signature checks, and the close codes were easy to control.