I stopped trusting automation the day I watched a script complete successfully — every step green, every log clean — and then spent four hours figuring out why half the environment was broken. The script did exactly what it was told. The problem was that what it was told was wrong, and no one had built in any way to ask whether it should stop.
Automation is not dangerous because it is fast. Automation is dangerous because it often lacks context, reversibility, and an understanding of organizational risk. A script can do exactly what it was told and still cause an outage. A workflow can complete successfully and still violate the intent of the change. A tool can automate the wrong thing perfectly. Speed is not the variable. Accountability is the variable.
The scenario that haunts infrastructure teams is not the automation that fails loudly. It is the automation that succeeds quietly and leaves behind a state that is correct by the script's definition and broken by the organization's definition. No alerts fire. No errors appear. And then, hours or days later, something downstream starts behaving strangely, and the investigation begins. By then, the blast radius has had time to settle in.
What I have come to believe is that automation without reversibility is not automation — it is a one-way door. And most teams do not think about the door until they are on the wrong side of it. The question that should precede every automated action is not "can we do this?" but "if this goes wrong, what is the path back?" If there is no good answer, the automation is not ready.
That is why Nexplane is not simply an automation tool. The goal is not to let machines act faster. The goal is to make actions more understandable, constrained, testable, and reversible. Every change should have a plan. Every plan should have a rollback. Every rollback should be tested. Not because failure is likely — but because confidence in the rollback is what makes the change safe enough to approve in the first place.
Trustworthy automation starts with accountable change. That means knowing who approved it, what it was expected to do, how it was verified, and what the recovery path looks like. That is not bureaucracy. That is engineering discipline. And it is the only kind of automation I trust anymore.