Sounds very familiar ;) Processes like these make it very, very difficult for employees to work on open source; at most they might have approval for one or two projects that are directly used by the company.