The three-layer defense architecture proposed in the original article is: email normalization plus ASN blocking plus zero-charge Step-Up verification, hardware plus /24 subnet composite fingerprinting, and pre-deduction atomic Redis Lua budget reservation.