Four-eyes release, enforced in the API
The approver can never equal the technician who entered the result. It is not a UI check that a determined click can route around — the request is rejected server-side before anything is written.
LabOS api/results/route.ts:265-277