Enforcement
Approval
Approving a notice is authorizing a specific document about a specific state of the world. Who may approve, what the confirmation asks, and the eight things that invalidate an approval.
Last revised
An approval is an answer to a question: this seller, this price, this policy, this evidence, this text — send it? It is given by a Brand Admin, with a fresh second factor, over the exact bytes of the notice. If any of those things change before the message leaves, the question that was answered is no longer the question being asked, and the approval lapses.
Approving
- Open the notice. Eligibility must read nothing blocking; a blocked notice offers no approval.
- Choose Approve. The page moves to a confirmation state that says what approving does and does not do, and asks for an explicit attestation.
- If your second factor is older than fifteen minutes, you are sent to the step-up challenge and returned to the same confirmation. The challenge performs nothing; the click that follows is the decision.
- Tick the attestation, add Notes if you wish, and confirm. The approval is recorded with who, when and the snapshot hash it covers.
What invalidates an approval
Invalidation is evaluated from the current state of the world at the moment of sending, not from a flag somebody has to remember to set. Eight conditions:
| Changed | Condition |
|---|---|
| The document | The rendered bytes no longer match the approved hash. |
| The policy | A different MAP version is in force. |
| The recipient | A different contact, or the same contact with a new address. |
| The evidence | A different package, or the same package altered. |
| The case | The seller cured, or the breach period is no longer open. |
| The sender | A different identity, or one that lost verification. |
| A hold | Somebody stopped this deliberately. |
A lapsed approval sends the notice back to ready for review with the reason. It is not canceled: the condition may reverse, and a drafted, approved document should not be thrown away over a temporary state. Re-approving after an invalidation is a new, deliberate authorization.
Who may approve
Brand Admins only, in this release. Compliance Managers own the compliance posture — promotions and exceptions, monitoring, seller classification, preparing notices — and do not release a message to a third party. A support session is refused before anything else is evaluated: the decision to contact a seller belongs to the customer.