What would have been approved automatically

Every approval decision is observed, per fingerprint bucket — the action, the amount band, whether the recipient was new, and who they were. This reports the buckets a person has approved without exception, and what promoting one would write into an agent's policy.

Observing is not acting. In the default shadow mode nothing changes who gets asked; can_promote is false and the promote endpoint refuses.

Each suggestion carries would_write_rule — the actual rule, built by the same function promotion uses, so the report cannot promise something promotion would refuse.