The scenario approved a held action and never rejected one. A reject that quietly executed would look exactly like a working queue until somebody read the outbox. Live 9/9: allow executed, credentials refused at 99%, two borderline actions held, one rejected (unexecuted, outbox unchanged), one approved (executed at that moment). Co-Authored-By: Claude Opus 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01WZb5A2kfVfjpdwSochkuHz