CreditLock catches the ambiguity before delivery.
REVIEWER proposes a resolution action for open issue.
RELEASE_APPROVER (must be distinct from Proposer) confirms proposal.