What three conditions must an authorized borrower meet in a Kaspa shared secret script?

An authorized borrower must satisfy all three of these conditions at once to spend a UTXO locked by a Kaspa shared secret script. First, they must know a pre-defined secret — in practice this is a cryptographic keypair, and the script verifies it with a signature, so guessing is not possible. Second, the outputs they create (the funds they send out) must equal or exceed the value of the inputs they are spending, meaning they cannot pocket any of the locked funds. Third, those outputs must go back to the same script address they spent from, not to an address they control freely. All three rules are enforced by the script itself, not by any person or organization. For a beginner, the key insight is that Kaspa can make a UTXO temporarily available to someone else while guaranteeing, in code, that the funds come back.