Input actions never receive fence=, so a take-over then hand-back during approval still clicks: assert_agent_may_act only asks if the holder is human now. Compare admitted.epoch immediately before _dispatch. Test uses a recording backend and does not patch _dispatch. Addresses kvnloo on #108914. (cherry picked from commit 97ce5d5a579ccc797c7ef50b6bb92465955a3277)