Prove the handoff before you add another bot
Most “missing” audit signals are already present—buried under vague names and empty property bags.
- instrumentation
- handoffs
Teams reach for a new automation whenever an audit question goes unanswered. Often the step already exists; the context does not. Queue, owner, and outcome belong in properties—not in five near-duplicate event names.
Keep verbs short and stable. Put source system, approval tier, and failure reason in properties so audit archaeology stays readable after the next rebrand.
In workflow audits we run from Central, collapsing duplicates usually beats inventing a sixth “task_done” event.
Store the dictionary where engineering already looks. A slide from last quarter’s offsite will not survive the next sprint.