An approval should refer to a specific version of the change. If the agent edits the code after review, inspect the new diff and repeat the relevant checks.
Separate permission to propose a change from permission to deploy it. Make the final action visible, attributable and reversible where possible.