Access review → approval queue

Detect permission exceptions and collect human decisions.

This task is eligible because it creates a record diff and has an attestable state transition. It will become a public battle only after paired adapters meet the same fixture and evidence conditions.