Reword a request a safety filter declined, in a fixed order, and keep the pair — because the refusal is usually about how it was asked rather than what was asked.
- Targets
- copilot-studio
- Highest risk
- read-only
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Work out why a change made through an integration reported success while the far system shows the old value — a lock, a cache, a stale binding, or the wrong identity.
- Targets
- dynamics-365
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Find why an agent keeps replanning past its budget — usually because nothing it called ever said plainly that it had succeeded.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Find out why a Copilot Studio agent is answering wrongly — whether the content is missing, unreachable, or being ignored — before changing anything.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Take a published Copilot Studio agent back out of service, least drastic action first, when it is answering badly in front of users.
- Targets
- copilot-studio
- Highest risk
- irreversible
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Stop a Copilot Studio agent burning credits faster than it was budgeted for, before deciding whether the consumption is genuine.
- Targets
- copilot-studio, power-platform
- Highest risk
- destructive
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Make an approval gate real — the draft visible where the record lives, a cap on what one approval covers, and a rejection path somebody has actually taken.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Deploy one tool that reports the caller identity it actually observes, in the host you will really use, before designing an integration around an identity you assumed.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Hand back a handle instead of waiting, tell the person what to expect, and make sure the retry they will attempt anyway does not do the work twice.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Reconcile what was indexed against what exists, then test the permissions in both directions — including one query for the most sensitive content in scope.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Turn "we can block it" into a measured control by withdrawing something on purpose, checking it as an ordinary user, and writing down how long it took.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Measure the thing you are replacing before you lose access to it, gate the switch on the same questions, and set the decommission date at cutover.
- Targets
- copilot-studio
- Highest risk
- irreversible
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Check a document generator against sparse and missing input, where fabrication is disqualifying rather than one score among several.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Set the threshold above which extracted values are accepted unreviewed from measured accuracy on real documents, after establishing that the results can be written anywhere at all.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Make a scheduled send tell an empty period from a failed look, so a broken source does not mark everybody served and defer them to the next run.
- Targets
- postgres
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
The pipeline refuses a run before it starts, so the deploy has to happen from a workstation — told apart from a real failure first, and with what the manual path costs put back afterwards.
- Targets
- github-actions, terraform, aws
- Highest risk
- irreversible
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Establish whether an action in somebody else's web interface actually happened, when a stale success looks like a fresh one and an open form looks like a failure.
- Targets
- linux
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Measure what rules can extract from a corpus before paying a model to read all of it, and tell a rule that is weak from a corpus that is silent.
- Targets
- postgres
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Find what is filling a volume before deciding whether to delete anything, so the deletion is informed rather than hopeful.
- Targets
- linux
- Highest risk
- read-only
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Fill fields from pages somebody else serves, at volume, without recording a guess as a fact or a refusal as an answer.
- Targets
- linux
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Poll a condition that is slow to settle, and give up on a schedule instead of waiting indefinitely.
- Targets
- linux
- Highest risk
- read-only
- Execution
- agent-autonomous
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Drain a node stuck NotReady and reschedule its pods, after establishing whether the kubelet is gone or merely unreachable.
- Targets
- k8s
- Highest risk
- destructive
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Restart a consumer group that has stopped advancing its offsets, after confirming the lag is real and not a monitoring artefact.
- Targets
- kafka
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Run an integration whose credential is one account session without losing that session — a second worker on the same key reads as a hijack, and the key does not come back.
- Targets
- aws
- Highest risk
- irreversible
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Drop a replication slot that is pinning WAL and filling the disk, after confirming nothing is consuming it.
- Targets
- postgres
- Highest risk
- destructive
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Confirm that a database role handed to an agent actually refuses writes, by the permission check rather than by an error that happened to arrive first.
- Targets
- postgres
- Highest risk
- read-only
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Post to a platform that has no usable API by driving a browser a person signed into by hand, and check the result as a stranger rather than as the author.
- Targets
- linux
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Publish one item to a feed strangers read, with the address assigned once by the server and kept even after the item comes off again.
- Targets
- postgres
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Make a rate mean something by counting a denominator every response passes through and a signal only a person can produce, without joining the two.
- Targets
- postgres
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Check an entry against the page its subject publishes, not the aggregator that carried it, and write down only what that page actually said.
- Targets
- postgres
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory