// Primary path: Oracle delivery
function ccipReceive(Client.Any2EVMMessage calldata message) external {
  require(msg.sender == ccipRouter, "Unauthorized");
  _execute(message.data);
}

// Fallback path: Proof-based execution (if oracle fails)
function executeWithProof(
  bytes calldata message,
  bytes calldata taifoonProof
) external {
  // Verify cryptographic proof
  require(taifoonVerifier.verify(taifoonProof), "Invalid proof");
  
  // Ensure not already executed via oracle
  bytes32 messageId = keccak256(message);
  require(!executed[messageId], "Already executed");
  
  // Execute with cryptographic certainty
  executed[messageId] = true;
  _execute(message);
}

// Users can always bypass oracle dependency