Currently caller ID is format-validated only (E.164). Ownership verification planned for v0.2. Ref: TODO in phone.py:110, SECURITY.md