Start with a clearly understood process
An unclear process should not be automated. Steps, inputs, ownership, and exceptions are mapped first, then the repetitive part suitable for safe system execution is selected.
Human approval points
Published material, payments, sensitive messages, and permission changes require appropriate review. Automation assists preparation, notification, and recording without removing decision responsibility.
Logs and recovery
Each run records its result, errors, and retries, with a way to stop the workflow and recover state when required. Keys, permissions, and data-retention periods are reviewed regularly.