Proposals here roll back to an ancestor and/or resume; executor and guardian changes are proposed with the SDK writer. Every action is checked against your role and simulated before your wallet signs it.
Exactly two (spec §7.5)
Only the owner, only while the workflow is paused and no proposal is active. To unpause during a recovery the owner must cancel it first.
A proposal (possibly resume-only) that completes its full lifecycle, timelock included, sets the workflow Active.
No single guardian and no executor can unpause. Cancelling or expiry never unpauses.
What this workflow's policy allows (spec §7.6)
Owner approval is required and there is no fallback. If the owner is unavailable, proposals expire and a paused workflow stays paused until the owner returns.
Under every policy, changing guardians or policy and transferring ownership require the owner.
Spec §3.1
No earlier proposals.