Secure escrow orchestration