Track PolicyEvaluator/govern wiring for require_approval after ADR-0030

[Ricky-G]

Follow-up to #2478 and #3015. Scope: wire require_approval through PolicyEvaluator and govern, keep audit linkage and timeout behavior covered, and keep the ADR/protocol foundation separate from the evaluator wiring PRs.

[github-actions]

🟡 Contributor Check: MEDIUM

Check	Result
Profile	MEDIUM
Credential	LOW
Overall	MEDIUM

Automated check by AGT Contributor Check.

[carloshvp]

Working on this in #3076: step 2 of the ADR-0030 rollout, routing require_approval through the action-bound ApprovalCoordinator in govern() (action-binding + digest, audit linkage, fail-closed timeout), with the legacy handler path unchanged when no coordinator is configured. I'm an external contributor so I can't self-assign; happy to be assigned if a maintainer can.

[Ricky-G]

Thanks for picking this up, Carlos Hernandez (@carloshvp). Assigning it to you.

I have gone through #3076 and it is in good shape (notes on the PR itself).

[Ricky-G]

For visibility: this is the Python wiring step for the approval chains. Cross-language parity for the same feature (TypeScript, .NET, Rust, and Go) is now tracked in #3083, so the other SDKs are not forgotten once this lands.

[imran-siddique]

Resolved by #3076 (merged 2026-06-16). require_approval is now wired through PolicyEvaluator / govern() in agent-mesh with full audit linkage and timeout handling per ADR-0030.