Want to automate the task of "when the viewer / uploader notices the need to update a particular locked file, ask the editor to confirm and approve the file update"?
To do this, from the perspective of user permissions, you need collaborator permissions that remove one permission from the viewer / uploader and grant one permission.

-Collaborator authority that grants manual workflow startup authority to viewer / uploader authority and cannot unlock files.

By realizing this authority, the following workflow can be automated in combination with Box Relay.

(1) Lock the approved document managed by the editor.
(2) The viewer / uploader notices the need to update the file.
(3) The viewer / uploader starts a manual workflow for the file.
(4) The information is notified to the editor by Box Relay, and the editor confirms the content and approves the work.
(5) The file lock is released by Box Relay.
Box Relay assigns a task to the viewer / uploader that invokes the manual workflow.
(6) After the work is completed, the viewer / uploader presses the task completion button to proceed with the workflow.
(7) The editor confirms the contents and approves the file.
(8) Approved files are locked again by Box relay.

The above is a specific story, but in general there are only 7 collaborator privileges, so many BOX users may have tasks that they want to perform but cannot. There is a possibility that all can be solved by creating a customizable collaborator privilege that allows each item to be set freely.