The communication policy's interim gate — an SI's call that contacts colleagues is judged by MediaService after FORBIDDEN and before the charter's approval: COLLAB_DENIED explains itself, REQUIRES_APPROVAL asks one INTERACTION_POLICY approval (a verified request may stand in), an approval opens its CONTACT grants, AUDIT hits are reported, and an org with no policy is asked once a minute (KamoCollab CP04 Task 21)