Maker-checker: a second person approves
The person who asks cannot approve, and the person who did it cannot check it. Agents never approve or check.
For: Admin, Project lead, Product owner
Where it applies
- Tasks: per category (configuration, access, data change, documentation, operation) you can require approval before and a check after.
- Records and changes: follow the edit rules and the roles that may approve.