Verify that missing approval, expired runs, and mismatched artifacts never produce an allowed release.