The human override, captured with its reason or not at all.
The runtime can hold a decision. A human may override the hold, but never silently: the override requires an identity and a written justification, and both are captured in the receipt. No justification, no override.
Decision under hold
Automated approval · held for human review hold
The runtime held this approval. To override, supply identity and justification.