The minimum reliable loop
Every implementation should define the artifact, reviewer, permission boundary, revision mechanism, and approval state.
Approval is not the same as execution permission
A reviewed plan may still require separate repository, deployment, or preview permissions. Keeping those boundaries explicit prevents a positive review from becoming an accidental authorization expansion.
A practical reference architecture
Use Draft Review for pre-Git plans, Markdown Review for source-backed documents, MCP or HTTP APIs for agent retrieval, and Live Preview Reviews only for applications that explicitly opt in.