Admin / reviewer access only (RLS + rank enforced server-side). Approving a proposal marks it for the lane to apply through the deploy pipeline; nothing changes the live site without an explicit apply. Every applied change is reversible from version history.