Two signatures, two different people

A QA Reviewer signs first, then a different QA Approver releases. Anyone who ran a load in the batch cannot sign it.