The submission endpoint validates inputs, rate-limits access and records audit metadata. Rapid duplicate requests are rejected.