Review device — not a security control. It changes what this prototype shows, never what anyone is permitted to do. Suggestion Approver exists for prototyping the suggestion decision flow and will not exist in the real application.