A practical approval matrix
Researched: 2026-03-05
This guide is updated regularly. Sources are listed under “References & evidence.”
Start with a matrix that covers the real levers:
| Dimension | Examples |
|---|---|
| Threshold | amount, risk score, customer impact |
| Role | requester, approver, reviewer, owner |
| Evidence | approval_record, exception_record, attachments, version_log |
| Exception policy | codes, escalation path, SLA |
Then attach the matrix to the workflow gates so it’s enforced during execution.
Patterns (SoD, re-approval, and exception ownership)
- Segregation of Duties (SoD): requester cannot approve their own exception.
- Re-approval triggers: policy changes, threshold changes, workflow version changes.
- Exception ownership: every exception code has an owner + SLA.
- Evidence completeness: gates require structured records, not only screenshots.
References & evidence
Researched: 2026-03-05
- OpenClaw exec approvals (example of explicit approvals for execution): https://open-claw.bot/docs/tools/exec-approvals
- OpenClaw command-audit PR (argument-level guardrails): https://github.com/openclaw/openclaw/pull/23840