After the SOW is signed, the founder issues the private onboarding token from the signed handoff workflow. The onboarding intake is not a public destination.