The approval and provider request are different objects.
Prove they still match.

const reservation = requireAllowed(await verifier.verifyAuthority({
  envelope: purchase,
  evidence: signedAuthority
}))
const consumed = await processorGate.transitionExecutionAuthorization({
  receipt_id: reservation.signed_receipt.receipt_id,
  compact: reservation.signed_receipt.compact,
  expected_envelope: purchase,
  expected_audience: processorAudience,
  action: "CONSUME",
  idempotency_key: `${attemptId}:consume`,
  provider_binding: exactProviderRequest
})
const redeemed = await providerGate.redeemExecutionPermit({
  permit_id: consumed.execution_permit.permit_id,
  compact: consumed.execution_permit.compact,
  expected_audience: processorAudience,
  expected_request: exactProviderRequest,
  idempotency_key: `${attemptId}:redeem`
})
if (!redeemed.provider_submission_permitted || redeemed.idempotent_replay) {
  throw new Error("No fresh provider claim")
}
const outcome = await submitOnceToProvider({
  idempotencyKey: redeemed.provider_idempotency_key
})
const terminal = await providerGate.reportProviderSubmission({
  provider_submission_id: redeemed.provider_submission_id,
  permit_id: redeemed.permit_id,
  claim_id: redeemed.claim_id,
  payment_reference: outcome.reference,
  outcome: outcome.status,
  occurred_at: outcome.occurredAt,
  provider_observation: outcome.boundedObservation
})
// independent_verification means independent of the caller's assertion.
// It is not an independent organization, certification or audit.
if (!terminal.independent_verification) {
  await queueProviderReconciliation(redeemed.provider_submission_id)
  throw new Error("Outcome remains fail-closed")
}
verifyExecutionReceipt(terminal.execution_receipt)