first review workflow slice

README.md

@@ -81,3 +81,13 @@ curl http://127.0.0.1:8000/repos/1/analysis-runs/1/candidate-graph
 ```
 
 Candidate entries are source-linked review seeds. They are not canonical registry truth until a review workflow approves them.
+
+Approve a candidate graph into the canonical registry:
+
+```bash
+curl -X POST http://127.0.0.1:8000/repos/1/analysis-runs/1/candidate-graph/approve \
+  -H 'content-type: application/json' \
+  -d '{"notes":"Approved first review package"}'
+```
+
+Approval copies candidate abilities, capabilities, features, and evidence into the approved registry tables, marks candidates approved, and moves the repository status to `indexed`.