Make approval a controlled program decision

Define decision authority

Name which outcomes can be reached automatically, which require review, who may change a result, and how an escalation is resolved. Keep internal control criteria private while retaining an auditable reason category.

Use explicit transitions

A case may move from waiting to review, eligible, not eligible, changed, or completed according to approved rules. Prevent undefined jumps that could trigger a notification or provider handoff without the required evidence.

• Current state
• Required evidence
• Permitted action
• Authorized owner
• Recorded reason

Align approval and customer communication

Only send a confirmed outcome after the relevant decision is final under the program policy. If the provider handoff remains pending, the message should not imply that card access is already available.