WF-20260612-014 · v1
Scheduled workflow architecture · 2026-06-12
Cowork Project Config
Autonomous
Nightly content-performance digest
CONFIDENCE · HIGH
HANDOFF · BUILD_READY
SCHEDULED · UNATTENDED
GATE CLEARED
NO GATE
BOUNDED · REVERSIBLE
Each night the Cowork project reads two operator-supplied exports from /inputs, joins and ranks them, and writes a content-performance digest to /outputs — no external publication, no source-system writes. The terminal action is producing an internal digest file; no GATE condition triggers because the consequence is bounded, observed in the next workday, and fully reversible. If Cowork is unavailable, the workflow falls back to a Claude Project run manually by the operator.
Local folder structure
content-digest/
├── inputs/ ← analytics_export.csv · cms_export.csv (dropped nightly by the ETL job)
├── outputs/ → digest_YYYY-MM-DD.md (operator-written · retain 90 days)
└── logs/ → run_YYYY-MM-DD.json (timestamp · run ID · status · input count · output path · errors)
Scheduled task
Frequency
Daily · once per night
Trigger condition
cron · 0 2 * * *
Expected runtime
≈ 3–5 minutes per run
Run window
02:00–04:00 local · after ETL
Execution sequence
ActionSystem / folderOutput
01Validate input manifestCowork · /inputsConfirmed file manifest
02Normalize & join exportsCowork runtimeUnified content table
03Rank by performance deltaCowork runtimeRanked content list
04Compose digest narrativeCowork runtimeDraft digest
05Write digest file TERMINALCowork · /outputsdigest_2026-06-12.md
Authorized actions
+Read files placed in /inputs
+Produce a ranked digest file in /outputs
+Write a structured run record to /logs
Prohibited actions · hard stop
✕May not publish the digest to any external channel
✕May not modify or delete the source exports
✕May not call a connector with write scope
✕May not run outside the defined run window
Fallback if Cowork is unavailable
Nearest surface — Claude Project, run manually. Adjustments: (1) operator uploads the two exports by hand each cycle; (2) the digest prompt is run on demand rather than on schedule; (3) the operator saves the output and records a manual run note in place of automatic /logs writing.
Expected outcomes
COMPLETEDDigest written to /outputs, run record logged, manifest validated
COMPLETED_WITH_WARNINGSDigest written, but one input arrived partial — anomaly flagged in the log
NEEDS_REVIEWRanking produced an implausible outlier; held for operator inspection
BLOCKEDAn input file is missing or the run window closed before ETL completed
FAILEDNo digest produced; the run is recorded and the next night proceeds independently
Autonomy expires when
✓Workflow steps, inputs, or outputs change materially
✓AI surface or tool changes (Cowork version, model, connector)
✓Policy or compliance context changes
✓An incident occurs
✓Error rate exceeds threshold — >1 missed run per month
✓Recertification interval passes — every 6 months
Reviewer role changes or becomes vacant — not applicable; AUTONOMOUS has no reviewer
Architecture options
OPT-1PRIMARY · NATIVE_SUITE
✓ SELECTED
Execution architectureClaude Cowork scheduled project; reads /inputs, writes a digest to /outputs, no connector write scope
Control fitProject instructions enforce read-only inputs and prohibit external publication
Implementation effortLow — create folders, instructions, and the cron trigger
Security fitOperates only on operator-supplied local files; no write access to source systems
PortabilityInstructions move to a Project surface for the manual fallback
Skill requirementsCowork administration · KPI reporting knowledge
OPT-2VENDOR_NEUTRAL
Any approved scheduler that can run a file-in / file-out model job with no write scope. Higher portability; the operator must qualify the scheduler against the acceptance run.
Omitted — LOW_CODE: no cross-system routing. · CODE_FIRST: a custom service adds maintenance burden over a bounded file task.
Selected OPT-1Selection by Platform administratorDate 2026-06-12
Build handoff pack
BUILD_READY
Terminal-action boundaryWrite an internal digest file; may not publish or modify source data
PermissionsRead /inputs · write /outputs and /logs only; no connectors, no source write access
Deterministic controlsReject a run with a missing or partial input manifest before analysis
Human checkpointsNone inside the run; an operator reads the digest the next workday
Failure / rollback / stopStop on a missing input; no external action has occurred, so no rollback is needed
Expiration triggersSource schema, terminal action, Cowork version, policy, or control changes; any incident
Current state
DISPOSITION_PENDING
Who acts next
Platform administrator
Exact next action
Record disposition for packet v1, then build the Cowork project
Operator Disposition
The Gate may recommend — the operator signs
APPROVE_FOR_BUILD
HOLD_FOR_EVIDENCE
REVISE
REJECT
Gate recommendationAPPROVE_FOR_BUILD — bounded file task, no gate, controls in place