Design the boundary
Local inference changes where model execution occurs, but it does not automatically make a workflow private. Tools, retrieved sources and telemetry may still cross a network boundary.
Keep access and responsibilities clear
Inspect every outbound operation separately. A local model is not evidence that an external connector or browser task is offline.
Test a small path first
- Choose one known input and write down the expected output.
- Check authentication, cancellation and an unavailable-service response before widening the task.
- Keep an auditable distinction between data retrieval, generated suggestions and external changes.
A practical starting point
Connect an external system deliberately. These steps describe the GoCux workflow and its permission boundaries.
- Inspect the integrations actually listed in your workspace. Identify the data source, the account that owns it, and the operation you need before granting access.
- Use the narrowest available permission and keep credentials inside the supported connection flow. An integration article does not mean a connector is installed or authorized.
- Test a read operation with a small, known record. Review its scope and output before allowing a workflow to make an external change.
What to verify
Confirm both authorization and the observed result. A successful sign-in is not evidence that every advertised connector operation works.
Bring this workflow into your workspace.
Set the scope. Review the evidence. Approve the steps that need it.