A person holds a steering wheel whose cable hangs loose, plugged into nothing. Below, a screen asks: send refunds automatically to all customers? Approve is the only option. Being present isn't the same as being in control. Oversight needs a decision still open, an owner, enough context, real alternatives, and a path that works when they say no.
Three different things: a person is present, perhaps only notified after the fact. Their approval is required, a real constraint but only on sequence. They can judge, and only this one is oversight. On an architecture diagram the three look the same.
An envelope is stamped sent. Later, a person is asked to approve something that already happened. Approval is crossed out in favour of notification. If the outcome is decided before they look, the step is monitoring, audit, or the start of a correction, not approval.
Whoever's free is crossed out: available isn't responsible. The reviewer should own the decision, have the standing so their yes settles it, and know the subject, or they are a delay rather than a control.
Approve and it ships. Decline and then what? A toast saying Declined, followed by nothing, is crossed out. Real non-approval paths: revise with the reason, stop and release what was held, ask for evidence, escalate, or fall back to a manual route. If refusing does nothing, the reviewer has a delay, not a decision.
Five questions for any Approve button: what decision stops here, who owns it, what does the reviewer see, what else can they do, and what happens when they decline. If any answer is missing, the gate is doing less than it appears to.