The approval-as-object point matches something we hit building a Jira workflow validator: an approval can go stale between when it's raised and when a human actually clicks it, if the evidence underneath shifted in that gap (code changed, a dependency moved) while the approval object still shows the old state. Do you re-check the evidence at the moment of approval, or is an approval good against whatever it was checked against when it was first raised?