Approval Workflows

Make decisions durable and enforce the approver permissions

Represent the request and decision state in application data. Use processes and frontend steps to collect a decision, but enforce authorization and allowed transitions in backend code.

Record who decided, when, the decision, and the relevant record version. Test two concurrent decisions, stale records, denied access, retries, and downstream failures. Escalation, delegation, notifications, and durable waiting require explicit application implementation.