Who gets asked when a run needs approval?

The person who owns the workflow. Not a group, not a rota, not whoever happens to be on shift.

You hear about it by email, one message per pending decision, and you decide in the console. The email is a nudge rather than the decision itself. There is no approve by clicking a link in your inbox, because a link that performs an irreversible action is a link that can be forwarded.

A pending approval waits indefinitely. Nothing expires it, nothing nudges you a second time, and nothing passes it to someone else after an hour. The run stays suspended with everything it has already done intact, and continues from that exact point when you answer. Minutes or days make no difference to it.

There are no approval chains, no escalation on timeout, no shift-aware routing. If you are away, the decision waits. That is the trade for the guarantee on the other side: one named person is accountable for what the workflow was allowed to do, and the record of the run says who that was.

You can answer with edits rather than a plain yes. A wrong recipient or a figure from last quarter is a correction, not a verdict on the run, and what gets recorded is what you approved rather than what was proposed.