Posted ledger entries are immutable. Refunds enforce requester≠approver≠executor SOD. Settlements match without rewriting history. No gateway payloads or religious/photo cells in finance views.