Approval workflow

Approval is intentionally simple — a magic link sent to a designated reviewer. No second login, no separate dashboard.

Roles

• Owner. Created when you sign up. Can change billing, domains, and role assignments.
• Approver. Receives approval emails for all document changes. There must be at least one approver per tenant.
• Member. Read-only access to the dashboard.

The flow

1. A drift event marks one or more documents as pending_approval.
2. Approvers receive an email with a one-click magic link.
3. Clicking the link opens a side-by-side diff view (no login required — the link is bound to the recipient and document version).
4. Approve or reject with an optional comment.
5. The audit log records who clicked the link, from what IP, and at what time.

Multi-approver mode

On Growth and above, you can require N-of-M approvals before a document publishes. This is useful if your legal and engineering teams want separate sign-off.

Reminder cadence

If a pending approval sits for more than 48 hours, we send a single reminder. After 7 days, we escalate to the workspace owner. We don't spam — the goal is that the email arrives once and the action takes one click.