List what can go wrong
Include missing inputs, ambiguous decisions and unavailable services. Identify the point where an automated action should stop.
Give exceptions an owner
Create a review path with enough context for a person to continue the work. Keep unresolved items visible rather than silently retrying.
