# CMP-064 — The opt-in page URL must be a deep link to the consent surface

> The URL in the message flow must point at the page that carries the consent surface, verified against the crawl.

- **Rule ID:** CMP-064
- **Layer:** Campaign (`CAMPAIGN`)
- **Checks:** `campaign.message_flow + website`
- **Severity:** BLOCKING — Breaking this rule gets the submission rejected outright.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** AI judgement over the submitted form
- **Fix type:** Fix the field — a better value in the form clears it
- **Required by:** TCR, Twilio, Bandwidth, AWS
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/campaign/cmp-064/

## Why this rule exists

A reviewer given a URL expects to land on the consent form. Landing on a homepage, a 404, or a page whose form is elsewhere converts a verifiable opt-in into an unverifiable claim, which is the most common reason an otherwise compliant flow is rejected.

## How to fix it

Link the exact page holding the consent checkbox, and open it in a private window to confirm it loads for someone with no session.

## Example of a compliant value

```text
https://acmecoffee.com/signup — the page with the checkbox, not the homepage.
```