diff --git a/.github/workflows/ai-pr-review.yml b/.github/workflows/ai-pr-review.yml
index c78d925..951d056 100644
--- a/.github/workflows/ai-pr-review.yml
+++ b/.github/workflows/ai-pr-review.yml
@@ -125,6 +125,7 @@ jobs:
         env:
           FORCE_FULL_DIFF: ${{ contains(github.event.pull_request.labels.*.name, 'ai-review-rescan') }}
         with:
+          approval-ceiling: ${{ vars.AI_REVIEW_APPROVAL_CEILING || 'request-changes' }}
           # AI_REVIEW_IMAGE_TAG: container image tag (default: latest)
           # Set to 'dev' to dogfood pre-release builds, or pin to a release
           # tag (e.g. '1.6.0') for reproducibility.
@@ -223,6 +224,7 @@ jobs:
        (github.event_name == 'issue_comment' && github.event.issue.pull_request))
     uses: tag1consulting/ai-pr-review/.github/workflows/slash-commands.yml@main
     with:
+      approval-ceiling: ${{ vars.AI_REVIEW_APPROVAL_CEILING || 'request-changes' }}
       event-name: ${{ github.event_name }}
       comment-body: ${{ github.event.comment.body }}
       comment-id: ${{ github.event.comment.id }}