Approval workflow platform: ActionRequests are authorized, approved when policy requires it, and then executed.