Approval & Separation-of-Duties Engine

Configurable, policy-driven approvals for sensitive change types. Every request enforces maker-checker (the requester can never approve), ordered stages with quorum, amount/risk thresholds, expiration and escalation. Approval authorizes exactly one action bound to the exact request payload; any material change invalidates it.