Resolve a public competitor using an accessible connected account and atomically save tracking with its first snapshot. External clients require Hive OAuth; workspace API keys cannot impersonate a signed-in user.

This reaches real people, so the person is asked before it runs. Their own AI client asks them. When the connection was made with Hive approvals switched on, the first call returns a single-use Hive approval link instead of acting, and the exact request is repeated with approvalToken and an Idempotency-Key once they approve it inside Hive.