What happened
The real architectural guarantee is that the model does not own order lifecycle state. That is not the same as saying a human approves every transition.
The old copy blurred those two ideas. I removed the stronger claim. A universal approval gate can return to the story only after it exists in the workflow and has tests around it.