Every capture here escalated because the policy could not accept it on its own, and only
a person can move it now. Each button posts to /approve/<id>,
/reject/<id> or /resolve_duplicate/<id>, which call
invoke(verb, …, actor="reviewer") — the same function the agent's tools call
with actor="agent", where these verbs are refused. Those routes also need the
reviewer token, so the reviewer is authenticated, not just named.
Nothing is waiting for review.