The integration test is the proof.

One end-to-end test exercises the full path: API-key agent → /v1/action-requests → policy decision → human approval → connector adapter execution → audit lineage → rollback. Runs on dotnet test.

[Fact]
public async Task ExternalAgentApprovalExecutionAuditRollbackAndReplay_ShouldWorkEndToEnd()
{
    // External agent posts to /v1/action-requests with an API key
    submitResponse.StatusCode.Should().Be(HttpStatusCode.Accepted);

    // Policy decision routes the action to a human approval matrix
    submitted.RequiresApproval.Should().BeTrue();
    submitted.PreviewAvailable.Should().BeTrue();
    submitted.RollbackPlanAvailable.Should().BeTrue();

    // Operator approves through the same service the console uses
    approveResponse.StatusCode.Should().Be(HttpStatusCode.OK);

    // Registered connector adapter executes the action
    completedRun.ResultJson.Should().Contain("connector-execution");

    // Audit lineage and rollback stay attached to the same run
    auditEvents.Should().NotBeEmpty();
}