The approval step is the part I'd keep no matter what. We let a script dedupe accounts once without review and it merged two different companies with the same domain prefix. Took a day to untangle. Do you flag low confidence matches for a human, or just skip them?