How much autonomy should this service allow at launch?

“Start with the narrowest useful task and the least-privileged tool set. Read-only steps can often run automatically, while payments, publishing, record deletion, account changes and other consequential actions should require explicit approval until evaluations and production evidence justify a broader boundary.”