Define the job
Name the trigger, input, output, owner, and observable definition of done.
TECHNICAL ORIENTATION
Start with the boundary.
A model call is one component. Begin with the job, data, action, review, failure, and recovery path around it.
Classify the input
Separate permitted, restricted, personal, regulated, and prohibited data before connection.
Protect the action
Treat generation as a proposal and put review or deterministic authorization before side effects.
Force the failure
Test bad input, invalid output, timeout, duplicate trigger, unavailable service, and manual recovery.
Keep a way back
Version the configuration, preserve the prior path, export the record, and rehearse rollback.