diff --git a/packages/application/src/api/http/controllers/meta-allocator.controller.ts b/packages/application/src/api/http/controllers/meta-allocator.controller.ts
index 7384b1d..d7133d2 100644
--- a/packages/application/src/api/http/controllers/meta-allocator.controller.ts
+++ b/packages/application/src/api/http/controllers/meta-allocator.controller.ts
@@ -59,7 +59,9 @@ export class MetaAllocatorController {
 
     const role = this.roleService.getRole(reviewerAddress);
     if (!['GOVERNANCE_TEAM', 'METADATA_ALLOCATOR'].includes(role as string)) {
-      this.logger.error(`Cannot reject refresh: ${role as string} for address ${reviewerAddress} not authorised`)
+      this.logger.error(
+        `Cannot reject refresh: ${role as string} for address ${reviewerAddress} not authorised`,
+      );
       return res.status(403).json(badPermissions());
     }
 
diff --git a/packages/application/src/application/use-cases/edit-application/edit-application.command.ts b/packages/application/src/application/use-cases/edit-application/edit-application.command.ts
index b552f1b..69a2c75 100644
--- a/packages/application/src/application/use-cases/edit-application/edit-application.command.ts
+++ b/packages/application/src/application/use-cases/edit-application/edit-application.command.ts
@@ -1,4 +1,5 @@
 import {
+  ApplicationError,
   Command,
   EventSource,
   ICommandHandler,
@@ -10,6 +11,7 @@ import { inject, injectable } from 'inversify';
 
 import {
   ApplicationInstruction,
+  ApplicationStatus,
   DatacapAllocator,
   IDatacapAllocatorRepository,
 } from '@src/domain/application/application';
@@ -112,6 +114,22 @@ export class EditApplicationCommandHandler implements ICommandHandler<EditApplic
 
     this.logger.debug('application');
     this.logger.debug(application);
+
+    // FIXME: This is a band-aid, but it's a necessary one. Something in the 2-way
+    // logic decides to re-open completed Applications on DB or Airtable updates.
+    // Do not proceed with editing completed applications
+    if (
+      application.applicationStatus == ApplicationStatus.DC_ALLOCATED ||
+      application.applicationStatus == ApplicationStatus.REJECTED
+    ) {
+      this.logger.debug(`Cannot edit completed application`, application.guid);
+
+      return {
+        success: false,
+        error: new ApplicationError(400, '400', 'Cannot edit completed application'),
+      };
+    }
+
     const prevApplicationInstructions = application.applicationInstructions;
 
     // FIXME ? the original code ALWAYS forced it to META_ALLOCATOR but I think that was wrong (?)