Locking a period closes it. Entries dated inside a locked period cannot be created, edited, submitted, decided or deleted — in this app, through the REST API, or by an agent over MCP. One rule, all three doors.
Approve everything you intend to pay before locking — approval is a change, so a locked period refuses it too.