The change has to prove itself.
Executive reviews an agent-written change against its requirement: every claim must quote the diff (checked by code), every finding is re-verified, risk decides what you must read, and it lists what it refuses to decide. It never approves; a named human signs.