Add an approval step whenever a wrong result could be published, emailed, charged, or used in a consequential decision. Place it after the transformations that produce the final draft, but before the action that sends or writes it.
Show the reviewer the original input, proposed output, important differences, and the destination. Define what approval, rejection, and timeout do; a timed-out review should not silently become approval. Log the decision without exposing private data. Test the workflow with an obviously incorrect draft to confirm that it cannot escape review.
For low-risk repetitive cleanup, a spot check may suffice; the review level should match the cost of error.