We start with a defined workflow, the information it uses, the decisions involved, and the points where human review must remain. Access, privacy, failure handling, monitoring, and provider limits are considered before an automation is placed into operation.