I don't think workflow by itself will do what you want. The 3 way match does this already. Basically forcing the vendor Bill to be unapproved. The biggest hurdles to workflow alone will be the one to many relationship between bills and POs