If the cart contains a violating booking AND the total exceeds the cart limit — which approval flow runs?

All approvers from the travel policy and from the cart rule are shown to the employee. Any of the assigned approvers can decide. One rejection or one approval is enough for the decision to take effect.