Human sign-off is described as non-negotiable, with possible seeded-error checks to prevent rubber-stamping.
Proposed mechanism: Test reviewer attention rather than assuming a human click is meaningful oversight.
Limit: Proposed control, not a validated deployed review system.