The full account is in the writing. In short: the plan lives next to the truth about the product, every draft passes the claims gate, drafting happens close to the posting date so old facts do not survive for months, and approval is a human act recorded as a fingerprint of the exact text.

The Social tab in the CRM: a two-week calendar of X and LinkedIn posts, each with a thumbnail, time and Approved or Draft status, and a theme on each Monday. (opens the full-size screenshot in a new tab)
The posting plan inside the CRM: a theme for each week from the school calendar, and every post's platform, time and status.

The posting agent can only post text that matches an approved fingerprint, and reports the live link when it has. It shipped switched off, runs a dry-run week first, and goes live with a daily cap and minimum spacing.

A draft X post in the editor. The house-style check lists an em dash to fix and two words to check, and the Approve button is unavailable. (opens the full-size screenshot in a new tab)
The house-style gate as a post is written: an em dash to fix and two words to check. A fix blocks approval.
The Social pipeline: Planned, Draft, Approved, Posted and Needs attention columns, with post cards and Approve buttons on the drafts. (opens the full-size screenshot in a new tab)
Every post moves from planned to drafted to approved to posted, and nothing posts until it has been approved.