Shared and reusable, backend and frontend
Whatever is built is a shared, agnostic, expandable owner at the lowest choke point, on the frontend as on the backend: one approval primitive (one service, one component) for every approval, one settings registry with a generated UI, one scope model shared by configuration, credentials, memory tiers and approvals.