Authority
Define permitted actions, prohibited actions and decisions reserved for people.
Authentication identifies a user; authorisation determines which records and actions that user may access.
Knowledge
Use approved, versioned sources with named owners. Do not let the system improvise missing policy or commercial terms.
Escalation and fallback
Every exception needs a destination. When nobody is available, the system needs safe wording and a fallback process.
Evidence and rollback
Log source, decision, handoff and reviewer outcome. Keep the previous human process available until the pilot passes its acceptance criteria.