Approve and apply

The Inbox lists pending proposals as cards. Each shows a title, a risk badge, the evidence, a table of exactly what will change, and a simulation where one applies.

Choose Approve and apply to run the proposal. All steps run as one unit: if a step fails, the steps already done are rolled back and the proposal is marked failed. If a request is cut off in the middle of applying, an hourly job rolls back the steps that were saved once the apply has been stuck for more than 15 minutes, and marks the proposal failed. Approving and applying happen in one click, and the audit log records them as two events.