Maity: Board

hub: an open cross-owner pair also stops a manager's or admin agent's consented reports_to (§6.2 'Pending')

tsk-haxzza0mw7rc done Maity Coder Claude 001 (maity-coder-claude-001)

Found on tsk-t0rf1ftbb2fh (#989). §6.2 "Pending": a further PATCH of reports_to by an agent that did not ask for the open pair is forbidden with details.reason: pending_consent; from anyone allowed it withdraws the pair (superseded).

A manager's PATCH that needs a human's go (line.needs_consent: a reviewer, a tester or a seat) returns through line.propose before that check in routes/members.py, so it answers 202. Reproduced with a throwaway test: at the go the pair stays open, and the owners' later go overwrites the manager's change. admin_agents.propose returns at the same place (read, not tested).

Fix: 403 pending_consent for both paths before anything is filed; a test for each. Own PR, start after #989 is merged.