# TUN Systemic Engineering — engineering review checklist

Questions to ask before an intelligent workflow takes consequential action.

Introductory Engineering guidance produced for the TUN Systemic Engineering website.
It is a working engineering model — an evolving proposal, not a certification standard.

## Intent and ownership

- [ ] Is the intended outcome written down in terms a non-author can evaluate?
- [ ] Are the acceptance criteria specific enough to fail?
- [ ] Is there a named owner accountable for the workflow in production?
- [ ] Is it clear which outcomes are out of scope?

## Data boundaries

- [ ] Which data sources does the workflow read, and who owns them?
- [ ] Is any sensitive data crossing a boundary it should not?
- [ ] How fresh must context be for the result to remain valid?
- [ ] Is retrieved content treated as untrusted input rather than instruction?

## Tool permissions and approval scope

- [ ] What is each tool permitted to do, and what is it explicitly refused?
- [ ] Are permissions enforced by the application independently of model behaviour?
- [ ] Which actions require human approval before execution?
- [ ] Does an approval cover one specific action, or an open-ended class of actions?

## Execution evidence and verification

- [ ] Is approval recorded separately from execution?
- [ ] What evidence proves the action occurred, beyond a returned status?
- [ ] Is verification independent of the component that performed the action?
- [ ] Is an unverified outcome displayed as unverified?

## Duplicates, failure, and recovery

- [ ] Is the action idempotent, and if not, how are duplicates prevented?
- [ ] What happens when the outcome is unknown rather than failed?
- [ ] Which failures can be retried, compensated, rolled back, or only escalated?
- [ ] Which effects are irreversible, and is that stated to the people involved?

## Monitoring and change

- [ ] Which signals would show the workflow drifting from its intent?
- [ ] Who investigates an incident, and with what access?
- [ ] How is a change reviewed before it reaches production?
- [ ] Is the evidence record itself reviewed periodically for usefulness?