An approval is a recorded decision by a person, tied to a specific action. It does not weaken a hard deny.
Architecture contract
Policy decisions areALLOW, ALLOW_WITH_LIMITS, ASK and DENY, with a precedence of hard deny, hard allow, soft, cognitive, then fail-closed. ASK creates an attention request; the answer becomes a scoped, expiring grant. Escalation is driven by confidence, consequence, irreversibility, cost, novelty and verification failure, not by blanket review. Money and client communication are always human-approved.
Missing calibration, low confidence, a judge timeout or a judge error all resolve to ASK, never ALLOW.