03 — Registries-Pivot AX-PROCESS Action Panel (Workstream B)

Principle

No checkbox for any governance-changing action. Deliberate option buttons with preview + warning + confirmation. Every action creates an audit row first, then calls a guarded backend function. A UI action never mutates canon directly.

Action vocabulary (live: process_axis_action_vocabulary, is_checkbox=false enforced by CHECK)

action_code	mutates_canon	requires_president	ai_delegatable	backend handler
REVIEW_BY_AI	no	no	yes	fn_process_axis_submit_review_action
REQUEST_MORE_EVIDENCE	no	no	yes	submit_review_action
CONFIRM_AS_PROCESS (non-canon)	no	no	yes	submit_review_action
REJECT_AS_NOT_PROCESS	no	no	yes	submit_review_action
REQUEST_SPLIT	no	no	yes	submit_review_action
SEND_TO_GOVERNANCE	no	no	yes	submit_review_action
APPROVE_OWNER_ASSIGNMENT	yes	yes	no	fn_process_axis_execute_guarded_action
APPROVE_BIRTH_ADMISSION	yes	yes	no	execute_guarded_action
DELEGATE_BATCH_TO_AI	no	yes (human owner only)	no	fn_process_axis_delegate_batch
EXECUTE_GUARDED_ACTION	yes	yes	no	execute_guarded_action

Backend contract (live functions)

• fn_process_axis_preview_action(action, kind, code) → effect envelope: will_change, birth/canon side-effect, rollback caveat, blocked_gates[], underlying APR action + handler_ref, exact backend action. Logs a PREVIEW row. (Proven: PROC-OWN-03 preview returns blocked_gates=[handler_unimplemented, president_vote_required].)
• fn_process_axis_submit_review_action(...) → non-mutating review actions only; upserts AI review; refuses if action mutates canon, or if a delegated_ai lacks an active grant.
• fn_process_axis_execute_guarded_action(...) → the ONLY canon-capable entrypoint. Gate A: president-required + non-human ⇒ BLOCKED. Gate B: handler_ref=unimplemented ⇒ BLOCKED. Gate C: no human president approve vote ⇒ BLOCKED. With current data it always BLOCKS; it never writes canon itself.
• fn_process_axis_delegate_batch(...) → validates an ACTIVE delegation, then applies allowed review actions; refuses when no grant exists.

UI sections (deploy packet — see doc 08/09 for routes)

1. Candidate/process list (from v_process_axis_review_action_queue).
2. Evidence panel (component graph, dry-run/correlation, owner gap, events, RP/canon state, policy gaps).
3. AI review panel (v_process_axis_ai_review_status).
4. Action panel — deliberate buttons (above), never checkboxes.
5. Preview modal (fn_process_axis_preview_action): what changes, birth/canon side-effect, rollback caveat, blocked gates, exact backend action.

Live proof

Action queue returns 10 rows. BLOCKED actions logged 2, PREVIEW 1, SUBMITTED 1. Births unchanged. The action panel is operational at the backend; the frontend is a deploy packet (operator-gated build).