Segregation of Duties

Keep the ability to initiate, approve and record a transaction in different hands, and review the access that would let one person do all three.