Index: src/services/guardianship/follows.js
===================================================================
--- src/services/guardianship/follows.js	(revision 5c373b8e846c6510a176f2fa06bfe3e2b6753102)
+++ src/services/guardianship/follows.js	(revision 5c373b8e846c6510a176f2fa06bfe3e2b6753102)
@@ -0,0 +1,75 @@
+/**
+ * Guardianship (FEP-633c §5.3) — follow-gating for wards.
+ *
+ * A `Follow` targeting a ward is NOT auto-accepted. It is held pending and
+ * routed to the ward's guardians, who approve or deny. A committed guardian's
+ * own Follow is auto-accepted (it needs no gate). Quorum policy per ward:
+ * 'any' (one guardian suffices, default), 'all', or 'none' (open).
+ *
+ * This module is the store + the decision; the AP plumbing (sending the
+ * Accept, inserting the follower) stays in ActivityPubService.
+ */
+import db from '../../config/database.js';
+
+let _s = null;
+function stmts() {
+  if (!_s) {
+    _s = {
+      ins: db.prepare(`INSERT OR IGNORE INTO ap_pending_follows
+        (id, ward_slug, follower_uri, follower_inbox, follower_shared_inbox, follower_name, follower_handle, follower_icon, activity_json, quorum, created_at)
+        VALUES (?,?,?,?,?,?,?,?,?,?, CURRENT_TIMESTAMP)`),
+      get: db.prepare('SELECT * FROM ap_pending_follows WHERE id = ?'),
+      byWard: db.prepare("SELECT * FROM ap_pending_follows WHERE ward_slug = ? AND status = 'pending' ORDER BY created_at DESC"),
+      approvers: db.prepare('SELECT guardian_uri FROM ap_pending_follow_approvals WHERE follow_id = ?'),
+      approve: db.prepare('INSERT OR IGNORE INTO ap_pending_follow_approvals (follow_id, guardian_uri, decision, created_at) VALUES (?,?,?,CURRENT_TIMESTAMP)'),
+      setStatus: db.prepare('UPDATE ap_pending_follows SET status = ? WHERE id = ?'),
+      del: db.prepare('DELETE FROM ap_pending_follows WHERE id = ?'),
+    };
+  }
+  return _s;
+}
+
+/** Record a gated follow awaiting guardian approval. */
+export function recordPending(wardSlug, f) {
+  stmts().ins.run(
+    f.id, wardSlug, f.follower, f.inbox, f.sharedInbox || null,
+    f.name || null, f.handle || null, f.icon || null,
+    JSON.stringify(f.activity || null), f.quorum || 'any',
+  );
+  return stmts().get.get(f.id);
+}
+
+export function getPending(id) { return stmts().get.get(id); }
+
+/** Pending follows for a local ward (its guardians decide). */
+export function listForWard(wardSlug) { return stmts().byWard.all(wardSlug); }
+
+/**
+ * Record a guardian's decision on a pending follow. Returns
+ * { outcome: 'approved'|'rejected'|'waiting', follow } so the caller can
+ * send the Accept/Reject. A single reject denies; approvals meet the quorum.
+ */
+export function decide(id, guardianUri, decision, guardiansOfWard) {
+  const follow = stmts().get.get(id);
+  if (!follow || follow.status !== 'pending') return { outcome: 'gone', follow };
+  stmts().approve.run(id, guardianUri, decision === 'reject' ? 'reject' : 'approve');
+  const rows = db.prepare('SELECT guardian_uri, decision FROM ap_pending_follow_approvals WHERE follow_id = ?').all(id);
+  if (rows.some((r) => r.decision === 'reject')) {
+    stmts().setStatus.run('denied', id);
+    return { outcome: 'rejected', follow };
+  }
+  const approvers = new Set(rows.filter((r) => r.decision === 'approve').map((r) => r.guardian_uri));
+  const guardians = (guardiansOfWard || []).filter(Boolean);
+  const enough = follow.quorum === 'all'
+    ? guardians.length > 0 && guardians.every((g) => approvers.has(g))
+    : approvers.size >= 1;                                   // 'any' (default)
+  if (enough) {
+    stmts().setStatus.run('accepted', id);
+    return { outcome: 'approved', follow };
+  }
+  return { outcome: 'waiting', follow };
+}
+
+export function remove(id) { stmts().del.run(id); }
+
+export default { recordPending, getPending, listForWard, decide, remove };
Index: src/services/guardianship/index.js
===================================================================
--- src/services/guardianship/index.js	(revision fcd696455474523785c5743fbe27829c039720d0)
+++ src/services/guardianship/index.js	(revision 5c373b8e846c6510a176f2fa06bfe3e2b6753102)
@@ -20,4 +20,5 @@
 export { wireHandshake, handleOutbox as handleGuardianshipOutbox, handleInbox as handleGuardianshipInbox, parseRelationship } from './handshake.js';
 export { offersCollection, followsCollection, wardsCollection } from './queues.js';
+export * as follows from './follows.js';
 export { listForParty as listOffersForParty, getOffer, findOfferAnywhere } from './offers.js';
 export {