How many changed security violations occur?
Two: instruction promotion and forbidden publish execution.
Why does the changed plot rise only once?
It counts forbidden action executions, not instruction-promotion events.
Does a valid review of version A authorize publishing version B?
No. Review is bound to the document version.