Building block
Approvals & consent
People approve what apps and others may do, and every decision is kept on an audit trail.
What a person notices
Installing an app does not hand it blanket access to everything. A person approves specific actions or scopes as they come up, rather than clicking one accept-everything button at install time.
An approval a person made can be checked later. It isn't just something they have to remember granting and trust was handled correctly.
Asking the same thing twice, or replaying an old approval, does not get silently waved through a second time.
What you get as a developer
Approvals run through a real, dedicated system with working create and verify logic, not a one-time permission prompt with nothing checkable behind it.
Scoped, not blanket
When a package wants to do something on a person's behalf, it goes through a real approvals system built for creating a specific approval for a specific action or scope, rather than one all-or-nothing install-time grant.
A receipt that can be verified later
An approval produces a real, independently verifiable receipt. There is real working code to verify that receipt after the fact, so a decision a person made can be checked and proven later rather than just trusted on faith.
Deduplicated requests
Approval requests are deduplicated, a real, working check against the same request being asked twice, or an old approval being replayed by an attacker to get waved through again.
An audit trail, by construction
Because every approval produces a verifiable receipt, a person or an auditor can trace back what was approved and when. That trace is what being kept on an audit trail actually refers to here.
How it connects
Sharing & permissions
A closely related but distinct control: approvals govern what apps and people may do, while sharing governs what they can see and edit.
Governance
Group-level decisions run through governance; approvals & consent are the individual-level counterpart.
Trust graph
Trust context between people can inform how a request is weighed, alongside the approval itself.