diff --git a/GOAL.md b/GOAL.md
index c03bd22..35612ad 100644
--- a/GOAL.md
+++ b/GOAL.md
@@ -82,6 +82,13 @@ These hold for Stage 1 and for every stage after it.
   calls its mutations and reads its introspection claim. It never caches
   validity, never infers consumption, and never holds approval current-state.
   `GH-DEC-2026-003` ordering is honoured: decision, then consume, then act.
+- **`approved` is never rendered as permission to act.** It is a state of an
+  object. Presenting it as "you may now do the thing" is a policy decision point
+  in the browser.
+- **Entitlement to view is `access-engine`'s.** A `200` from `approval-engine`
+  is not permission to see the approval; that engine never answers "may this
+  actor do X". This surface obtains a decision before rendering and never
+  substitutes local judgment for it.
 - **Identity is imported.** Every principal on this surface is authenticated by
   `key-cape`. No local credential, no self-issued assurance level. Human
   principals carry `principal_type: human` and are refused `approval:consume` by