Function issue_approval 

fn issue_approval(
    state: &AppState,
    did: &str,
    record: &DecisionRecord,
    token: String,
) -> Result<Issued, ApiError>

Approves record for did by spending token: issues the code, builds the client’s redirect, and settles the record, holding the redirect when a browser carries it.

What bot.did.approveAuthorization does once it knows the caller, and what GET /oauth/authorize does for a sign-in the account’s remembered approval confirms. The e-stop is the caller’s to check.