diff --git a/docs/approvals.md b/docs/approvals.md
index 2a604632..7f5149aa 100644
--- a/docs/approvals.md
+++ b/docs/approvals.md
@@ -30,8 +30,10 @@ happens after a decision lands.
    applied.
 3a. **Flake validation (ApplyCommit only):** after the proposal tag
    is planted, hive-c0re reads `proposal/<id>:flake.lock` and
-   runs two checks (closes #317). The request is rejected (no
-   approval row created) if either fails:
+   runs two checks (closes #317). If either check fails, no
+   pending approval is created for the operator — the row is
+   marked failed and surfaces on the dashboard with the
+   validation message:
    - **Stale lock** — materialises the commit in a temp worktree,
      runs `nix flake lock` (no `--update-input` flags, so it only
      fills missing entries), and rejects if the committed