Institutional operations
Maker-checker approvals
Separate instruction preparation from independent execution authority.
Immutable terms
An approval refers to the original resource, version and exact terms. Retain command IDs, reasons, previews and quote identities through retries and review.
Independent decisions
Only an entitled checker can decide an approval; makers cannot self-approve. Expected versions guard concurrent decisions. Rejected or cancelled instructions cannot be treated as dispatch authority.
Dispatch revalidation
Dispatch checks current actors, expiry and original terms again. A stale session, changed policy or revoked checker is not ongoing execution authority. Read dispatch state and the original command result after interruptions.