Authority
Define permitted actions, prohibited actions and decisions reserved for people.
Authentication identifies a user; authorisation determines which records and actions that user may access.
Knowledge
Use approved, versioned sources with named owners. Do not let the system improvise missing policy or commercial terms.
Escalation and fallback
Every exception needs a destination. When nobody is available, the system needs safe wording and a fallback process.
Evidence and rollback
Log source, decision, handoff and reviewer outcome. Keep the previous human process available until the pilot passes its acceptance criteria.
Technical evaluator notes
Evaluation should confirm architecture, data handling, knowledge ownership, permissions, human authority, QA/UAT criteria, integration boundaries, monitoring, audit evidence, release gates and rollback for the specific workflow. The guide does not claim that external systems are connected.