Automation & Orchestration
Workflow monitoring and recovery: no automation fails quietly
People stop checking
The first few weeks after an automation goes live, someone checks it every morning. Then it works for a month, and they stop. That's exactly when it fails: an expired password, a renamed field, a timeout. The first sign is a customer asking where their invoice is.
Monitoring replaces the morning check. Every run has a record and a status; anything failed or stuck reaches a named person, in a channel they actually watch, with enough context to fix it.
- Succeeded
- 46
- Running
- 3
- Retrying
- 1
- Stuck
- 1
- Failed
- 0
Repair one failed run
Step 1 of 4: Alert
Close-out run r-2304 (job J-422) failed at Create invoice: accounting rejected tax code HVAC-SVC. Three earlier steps are done. Fix the code mapping and resume.
Run r-2304 · J-422
- done
Validate
- done
Save state
- done
Check total
under the approval limit
- failed
Create invoice
tax code HVAC-SVC not recognised
- not started
Send invoice
- not started
Notify office
The run record shows exactly where it stopped and why.
Tax code mapping
The tax code mapping is updated: HVAC-SVC now maps to SERVICE. The change is recorded with who made it.
Run r-2304 · J-422 · resumed from step 4
- done
Validate
- done
Save state
- done
Check total
- done
Create invoice
INV-2215
- done
Send invoice
- done
Notify office
Resumed from step 4. The first three steps weren't repeated, and the customer got one invoice.
Six parts of a run you can trust
01
Run records
What happened, step by step
Each run has an ID, its inputs, the outcome of each step, and a final status.
02
Idempotency
Safe to run twice
Steps that might run twice are designed to be safe to repeat.
03
Retry policy
Try again, within limits
Temporary failures retry within limits. Steps with external side effects, such as sending a message or charging a card, follow explicit rules about whether they may retry.
04
Stuck-state detection
Silence is a signal
A case that hasn't progressed within its expected time raises an alert.
05
Alerting
To someone who'll see it
Failures reach a named owner, in a channel they actually watch.
06
Repair paths
Fix and resume
A failed run can be inspected, corrected, and resumed from the step that failed.
What may retry
What monitoring hands off
In
Out
Worth it for any automation you depend on
Good fit
- Any automated workflow the business depends on.
- Especially ones that touch customers, money, or other systems.
- Automations nobody has looked at since they were set up.
Not the right fit
- A one-off script run by hand while someone watches it.
Questions about workflow monitoring and recovery
Can you add monitoring to automations we already have?
Usually, yes. We inventory what's running, add run records and alerts where the tool allows, and rebuild the fragile ones around saved state so they can be resumed.
Who gets the alerts?
A named owner per workflow, agreed up front, in the channel they actually use: email, Slack, Teams or a text for urgent ones. Shared inboxes don't count.
What's a stuck case?
One that hasn't failed but hasn't moved: an approval nobody has answered, a step waiting on a system that never replied. Each stage has an expected time, and silence past it raises an alert.
Why not just retry everything?
Because some steps change the world. Retrying a read is harmless; retrying a payment or an email can do the thing twice. Each step gets its own rule.