DETERMINISTIC EXECUTION
Once approved, it never improvises
A playbook that's been approved runs exactly the same way every time it's triggered. It doesn't call a model again or devise a different approach on subsequent attempts. That consistency is what makes it safe to leave running unattended: the version you approved is the only version that ever executes.