CategorysafetyManual6.2Evidencedocumented
ProblemA binary autonomous or not switch has no middle, so people flip it too early.
TechniqueDefine dry run (research, qualify and draft, contact nobody), approval (messages queue and wait for a human signature per batch), and controlled autopilot (sends within a preset audience, channel, schedule and daily limit, escalating high-risk replies).
Why it worksAutopilot is only defensible once the first two modes have produced boring results for weeks, and the modes make that sequencing explicit.
When to useAny outbound or externally-visible pipeline.