TL;DR (the safe automation progression)
Start with a heartbeat that only reports status. Then add one small action. Then add approvals for risky actions. Autonomy is earned.
The number one heartbeat mistake is skipping budgets and stop conditions.
- Tier 1: report only (no external side effects)
- Tier 2: safe actions (format, summarize, draft)
- Tier 3: risky actions behind explicit approval
- Always: budgets (time, steps, external calls) and a stop rule