The review, as something a person can read and act on.

The same data as the JSON route above, laid out so the decision can be made without leaving the page: the prompt in full, the media playing in place, and the two buttons that end it.

Any ?token= is carried into the buttons' requests, so a reviewer who arrived from Slack without a session can still decide — once. It is put there by the script rather than into a form action so it never lands in document.referrer when a reviewer opens one of the asset links.