Set up always-on agents only where /automate, triggers, identity, memory, permissions, no-action rules and approval gates are clear.