Nothing here acts without a named approver.

Every action the system can take is listed below — its risk, whether it needs approval, and who signs. The list is read from the running system as this page loaded, not from a slide; every approval is recorded, and all of it can be stopped at once.