Decide a Trust Model v3 manual-verification submission

Approves or rejects one current private entity/license submission. A human needs fresh AAL2 and complete_manual_verification; an external back-office agent needs that exact action on its active key. The submitter and current business owners cannot approve. Rejection should include a controlled owner_reason_code and always carries a separate private audited reason; for backward compatibility only, an omitted rejection code maps to the controlled generic other copy. Approval forbids owner_reason_code. Every official_source_manual decision requires the exact nonempty authority name and valid HTTPS source URL; document_review cannot carry an external source. official_record_not_found is additionally limited to a rejected official_source_manual review. Approval requires method-specific checks, reviewer-supplied validity within the factor/method ceiling, exact non-wildcard taxonomy scope for a licence, and exact type-to-confirm. The Loppee service writes the receipt and derives class; the caller cannot set either.