Recorded approval is not completed finalization

Observed 2026-09-08 while tracing theft COR-4076 / PR #804 review acceptance. A review transaction can persist approval before asynchronous verification finishes; failure can occur even after the parent reaches Verified or Failed Verification. Therefore a recorded acceptance is not proof that finalization completed. A safe retry must resume verification without appending a second decision, admit the recorded acceptance even when the parent is already terminal, and serialize the entire request including post-transaction work so another decision cannot race it. Reusing a dedicated session advisory lock with a distinct key avoids holding the group-row transaction lock across provider work that needs that lock itself. Source: review route control-flow inspection and regression tests covering overlapping accept/decline and acceptance retries from Required Review, Verified, and Failed Verification. This is a retry-design lesson, not a claim of exactly-once external side effects.