Approve or cancel one canonical Hex operation proposal

Records one identity-only approval or cancellation. Exact retries return the durable decision receipt; conflicting transitions are refused.