{
  "id": "CMP-064",
  "slug": "cmp-064",
  "title": "The opt-in page URL must be a deep link to the consent surface",
  "statement": "The URL in the message flow must point at the page that carries the consent surface, verified against the crawl.",
  "rationale": "A reviewer given a URL expects to land on the consent form. Landing on a homepage, a 404, or a page whose form is elsewhere converts a verifiable opt-in into an unverifiable claim, which is the most common reason an otherwise compliant flow is rejected.",
  "layer": "CAMPAIGN",
  "layerSlug": "campaign",
  "object": "campaign.message_flow + website",
  "severity": "BLOCKING",
  "detectability": [
    "AI_FORM"
  ],
  "failureClass": "RETRY_FIELD",
  "authorities": [
    "TCR",
    "Twilio",
    "Bandwidth",
    "AWS"
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "Link the exact page holding the consent checkbox, and open it in a private window to confirm it loads for someone with no session.",
  "example": "https://acmecoffee.com/signup — the page with the checkbox, not the homepage.",
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/campaign/cmp-064/",
  "markdown": "https://ekas.io/rules/10dlc/campaign/cmp-064.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}