The problem
Create one immutable request ID with an expiry and the approver’s authorized identity.
Design the boundary
Summarize amount, requester, deadline and a link to the full record; never include secrets.
Process the interaction
Accept only explicit approve or reject actions after authorization. Record the decision and actor in your system.
Measure the outcome
Measure decision time, expired requests and human escalations.