Who is asking?
Customer, provider, admin, AI agent, app, website or internal process.
What do they want?
Pay, publish, refund, verify, approve, unlock, send, delete or override.
What proof exists?
Completion, return, review, consent, timing, device, status, identity or approval.
What is the safe answer?
Allow, hold, review, ask for more proof, narrow the action or block.