# Approval-first automation

Original Open Practice material · CC BY 4.0

- [ ] Input and output are defined.
- [ ] Private data is minimised.
- [ ] API scopes are limited.
- [ ] Stable job IDs prevent duplicates.
- [ ] Retries are bounded and respect quotas.
- [ ] A person approves public actions.
- [ ] Errors fail safely.
- [ ] Logs contain no secrets.
- [ ] Provider spending is capped.
- [ ] A tested pause/stop procedure exists.