You approve every send.
Provenance produces drafts only. Every message waits for your sign-off — no background blasts, no scheduled torrents, nothing that quietly torches your domain reputation while you sleep.
Suppression-aware and throttle-respecting by design.