Separate who requests a payout from who approves it.
A finance operator requests, a treasury lead approves after the wait, and only listed addresses can be paid.
What you set up
- Requester and approver roles
- A waiting period — one day, say
- Vendor addresses on the recipient list
- Token contracts on the allowed list
Finance operator
requests
Treasury lead
approves
Vendor
paid
Unlisted
address
Refused
Illustrative
