Approvals (Maker-Checker)

A real maker-checker workflow: one teammate proposes a sensitive action, one or more others vote before it executes. No action bypasses this once a policy covers it.

Define a policy

GET /team/approvals/policies

A request is created

When a covered action is attempted (e.g. a large card issuance), a request appears at GET

/team/approvals/requests

Reviewers vote

POST /team/approvals/requests/:id/vote

Threshold met → executes