Can Dispatch approve changes automatically?

Only when you tell it to, and only for low-risk requests. Each site has a policy that lets low-risk requests go live without waiting for a reviewer. The approval is recorded with the policy as the actor, the activity feed logs it, and restore is one click away. Standard-risk requests still wait for an approver, and high-risk requests need two distinct approvers, enforced in the database rather than in the interface.