Which tasks require approval

The standard is "does it leave the company, and can it be undone."

• Needs approval: external actions like sending email, posting to social/blog, or deploying. Depending on risk level (low, medium, high), an approval step gets attached.
• Doesn't need approval: things that stay inside the company, like research, drafting, or making internal documents.

As approval history builds up for a risk level, you can turn on auto-approve for it from Your turn. Every risk level needs the same amount: 5 approvals. Only the owner can turn it on, since it skips human approval.