Use an explicit, wallet-bound approval once. Changed requests require another holder decision.
One-use approval created from the holder's reviewed sharing plan.