Approvals

High-risk changes the policy engine paused for human sign-off (spec §11/ADR-004) — enforced in the backend, not just this queue.