How does Kestra support approvals, segregation of duties, and auditability?

“Every flow is YAML in Git. Every execution is immutable and replayable. RBAC enforces least privilege per namespace. Audit logs stream to your SIEM. Lineage ships with each run. Four-eyes approval gates are a first-class flow primitive, ready to enforce SOX, BCBS 239, Solvency II, DORA, and internal controls for regulatory submissions, payout approvals, and underwriting decisions.”