Every spending action, publish action, outbound send, and launch authorization requires explicit owner approval. No live execution occurs without your authorization.