OSS-first docs
These docs teach the open system first: contracts, generated surfaces, runtimes, governance, and incremental adoption. Studio shows up as the operating layer on top, not as the source of truth.
Approves a review record. Terminal at the record level — re-opening requires a fresh review (no `review.reopen` in v1.0).
Per SEAMS §3.7 (S-07): when `subject.kind` resolves a downstream callee (`governance.policy.activate` ∨ `workflow.run.resume` ∨ `agent.set-autonomy`), the handler dispatches it via the `lib.companyos-runtime` outbox. The dispatched op runs under the original reviewer's auth context (§1.2); the handler pre-checks the reviewer's capability at decide-time per Q-03 and refuses with `FORBIDDEN` when the downstream capability is missing — prevents the "approved but inert" state.
Capability: `review.act` (+ implicit downstream capability where dispatch applies). Per SEAMS §1.5, missing capability returns `FORBIDDEN` — auditor persona sees the button disabled with a read-only tooltip.
Idempotency: `idempotencyKey` is required. Replays return the original result; differing payload on replay → `IDEMPOTENCY_FAIL`.