Keep purpose, owners, data access, action authority, evaluation evidence and incident controls visible in a compact operational record.

Design operation identifiers, idempotency checks and reconciliation so a timeout does not turn one authorized action into several.

Preserve verified progress, artifact versions, pending approvals and blockers so interrupted work can resume without stale assumptions or duplicate actions.

Expand from replay tests to shadow mode, reviewed drafts and bounded live actions only when evidence supports the next stage.