Creative approval workflow

Media attached to a post is treated as creative that has to be ready before the post can go out. Creative readiness is a gate: a post whose creative isn't ready is blocked rather than published with broken or non-compliant media.

This keeps the approval promise honest for media too — you approve content and its creative together, and Signal won't quietly publish a post whose image failed validation.