Highly recommend this whole piece from @jasoncrawford on what’s gone wrong with “review and approve” as a regulatory approach: