When a workflow with reads, drafts, sends, payments, and deletions enters a real workflow, who owns the stop button?
The human owner checks the evidence before the consequential step; an uncertain result stops the run.
The deliverable is an authority matrix separating reads, drafts, sends, payments, and deletion. I would make human ownership visible beside it.
For a workflow with reads, drafts, sends, payments, and deletions, I would assign authority by action class instead of using one broad approved flag.
In a small Muse pilot, I would test personal-agent preparation with explicit approval before consequential actions and ask a second operator to check human ownership.
Which part of human ownership would you verify first?