Approvals inside workflows

Add and handle a gate#

1. Open the workflow canvas and add an Approval step before the protected action.
2. Pass the draft or decision context into the approval message.
3. Keep the following write or send step separate so rejection stops it cleanly.
4. Save and run a test that reaches the gate.
5. Decide the pending approval from the Approvals area in Workflows, then inspect Runs.

Expected result#

The run enters a needs-approval or waiting state and does not execute the protected step early. Approval continues the configured path; rejection leaves an auditable stopped outcome. Hard policy can still refuse an action after approval.