You need to add a rule to the folder that content gets uploaded to (or a general rule for all sites) such that when new content is created a workflow is started (thats standard functionality in rules and there is a standard "Approve" workflow).
Making it invisible will require configuration. You could revoke everyones privilages from the document apart from the manager on upload and then extend the "Approve" bit of the workflow to reinstate privilages if approved.