When a workflow with reads, drafts, sends, payments, and deletions enters a real workflow, who owns the stop button? The human owner checks the evidence before the consequential step; an uncertain result stops the run. The deliverable is an authority matrix separating reads, drafts, sends, payments, and deletion. I would make human ownership visible beside it. For a workflow with reads, drafts, sends, payments, and deletions, I would assign authority by action class instead of using one broad approved flag. In a small Muse pilot, I would test personal-agent preparation with explicit approval before consequential actions and ask a second operator to check human ownership. Which part of human ownership would you verify first?