Freeze a narrow instruction, bind it to one delegate, and let one public action consume that authority. The fuse cannot be replayed.
The exact address is engraved into the fuse. Once armed, only that delegate can ignite it; the creator can still revoke it before use.