Route, certify, and audit — no more email approvals

Program lead, finance, compliance, and authorized submitter each certify a distinct responsibility. Sequential where dependent, parallel where not. Every decision timestamped and named.