Decide the stopping conditions first

The conditions that should return control to a human before automation grows wider.

Stop on a failed test, unexpected diff, or request to send data outside the project.

Do not allow publishing, deletion, billing, or permission changes without approval.

Set a retry limit and a change-scope limit so the agent cannot run forever.

Run the five-question safety check before you delegate.