'Approve for publish' log

We've got a business requirement here to track who publishes what piece of content and when.

I've found Doc ID 1401044.1 which states that, unfortunately, WCS does not record this information anywhere. I can see how you can potentially look at workflow history (if it has a publish action somewhere in the workflow) but that doesn't help so much. Anyone with approval rights outside workflow can still approve things with no record and if a workflow action is approving content you're inevitably going to end up with items in the held queue that a user will have to take the decision on.