The easiest way to accomplish this is to set up a process that runs upon Submit of the timesheet. You could set up rules in the process so that any timesheet that has less than a parameter number, or more than a parameter number will be Returned. Depending on how fancy you want to be, you could include a notification email to the submitter and/or his/her manager, and you can set up different rules for different classes of users (contractors, exempt employees, hourly employees, etc.
John