On staging and production, someone else says yes first. The approval is a record, not a click: it names the person, and the cluster refuses a grant that names nobody, or names you.
Judged like a change
The approver sees the mode, process and volume access, the duration, the reason, the incident link and the image the pod runs. A vague reason is easy to deny.
Nothing early
An approved request touches nothing until the requester presses Start. The session's clock starts then, so approval is not a standing pass.
Glass broken
With nobody to approve, an admin can start at once. Everyone is told first, the grant is marked, and someone else must review the recording afterwards.