Two gates
One in each direction.
Most platforms guard the way in. Pivot guards both directions, because the risk to a firm runs both ways: work reaching a client before it was reviewed, and work starting before anyone agreed to do it.
OUTBOUND
The publish gate
Nothing crosses to the client side until a named person at the firm releases it. Proposed entries, exceptions, internal status vocabulary and draft numbers do not exist in the client's view — not hidden, not greyed out, simply not there.
A client can never see a number the firm has not stood behind.
INBOUND
The request gate
What a client asks for lands in the firm's queue, and someone at the firm accepts it with a scope note before any work begins. Cheap, bounded items — booking a meeting, requesting a copy of a released document — auto-accept against a monthly cap the firm sets per catalog item.
No unpriced work quietly starts itself.