HISTORICAL DIG · JUDGMENT AND RUN RECORD
Can a failed automation rerun safely?
Maker material and community signals treat failure location, ownership, deduplication, and targeted retry as separate controls; BitShovel also ran one local-file test with three samples.
In this local-sample run, a missing field was located, a duplicate input was blocked, and only the repaired item was retried. The next step is to publish a safe input set, seek independent review, and reproduce it read-only in a second tool. Sending, publishing, and deletion remain behind human confirmation.
- 01Valid sampleDraft written
- 02Missing fieldStopped with an alert
- 03Duplicate inputNo second write
WORKFLOW 001 · NODE POSITION
Current node 057 nodes total
Return to the last safe node
HOW IT RELATES TO THE CURRENT WORKFLOW
Separate historical Dig: recovery after failureThis is a separate historical Dig about recovering from failed automation. It does not answer Workflow 001's questions about tool choice or project re-entry. Its method is still useful: set limits, stop conditions, and a recovery path before recording what actually happened. It neither compares AI-tool setups nor tests DevHub's project re-entry.
Where this record standsRecord scopeStatus, audience, boundary, and review plan
Where this record stands
- Current limited guidance
- Revision 3
- One BitShovel local self-test
- No independent review yet
- Developing
- Corrected
- Who it was for
- People connecting search, organization, notifications, or publishing who have not decided how to stop a failed run or who owns the fix
- Why it mattered
- Automation without a plan for failure can copy one small error across more files, accounts, and recipients. A successful run does not make its output correct.
- Where the judgment stops
- n8n documentation establishes available control points, not reliability for a node, credential, or third-party API. Community failures are scenario signals, not a failure rate.
- Evidence state
- BitShovel run logs record three initial samples, one missing-field failure, one deduplication, and one targeted retry. The input samples are not public, there were zero independent reviewers, and no second tool, real API, production permission, or user adoption was tested.
- Planned review
This is a planned review date, not live monitoring or a promise of continuous updates. Sources may change between reviews; reopen the original sources before paying, publishing, granting access, or making an irreversible decision.
30 SECOND CHECK
Fit boundary
It fits if3 · View conditions
- You have a read-transform-draft flow and can provide three non-sensitive test samples.
- The flow can remain read-only, with sending, publishing, deletion, or broadcast still confirmed by a person.
- You will deliberately create one recoverable failure and record input, output, logs, owner, and retry conditions.
It does not fit if3 · View conditions
- The first test must use production data, production credentials, or a real broadcast destination.
- A failure can only rerun the whole batch, or duplicate inputs and side effects cannot be identified.
- You need unsupervised sending rather than a stoppable, inspectable draft flow.
Do not start yet if3 · View conditions
- You do not yet have one valid, one missing-field, and one duplicate non-sensitive sample.
- API, model, notification, or active-time caps are not written down.
- Original inputs and execution logs are unavailable, or no failure owner is named.
BEFORE STARTING
Bound the run
Write down the goal, limits, and stop conditions first
Decide what this pass must answer, how much it may consume, and when it stops before opening a tool. This is a bounded experiment, not a promise about every automation workflow.
- 01PreflightGoal, permission, and stop rule
- 02RunLeave a location and state on failure
- 03RecoverRepair and retry the target only
- 04ReceiptOpen the result, gap, and next step
- 01
The question that matters mostOpen
Whether a failed item can be located and rerun without duplicate side effects.
Decision this pass should supportDecide whether this read-only flow is ready for reproduction in a second tool; stop expanding it if targeted retry or deduplication fails.
- 02
What already existedOpen
A read-transform-draft flow exists, but there are no three-case samples, failure alert, or safe-retry record.
- 03
What should be left behindOpen
Three findable execution records, one error alert, and one retry without duplicate side effects.
- 04
Who should check itOpen
The alert opens the failed input, the fix reruns only that item, and duplicate input does not write twice.
1 uninvolved reviewer
- 05
Time, cost, and permission limitsOpen
24-hour calendar window · 60 min · 0 CNY
Read-only test data only; no production write access, broadcast, publishing, or deletion; cap API, model, and notification calls.
- 06
When to stop and how to recoverOpen
Original input or logs are unavailable, duplicates cannot be identified, or testing requires production write access.
Disable the workflow, revoke test credentials, delete test drafts, and resume from the last read-only node.
Completion standard and non-goalsOpen
Completion standard
- All three samples leave findable input, output, and execution records.
- The missing-field sample fails and points to an owner.
- After the fix, only the target item reruns and duplicate input does not write twice.
Not part of this pass
- Do not test production sending, publishing, deletion, or broadcast.
- Do not establish general reliability for n8n, a node, or a third-party API.
- Do not present one safe retry as unattended-automation capability.
Historical actionView the minimum action retained at the time
Minimum action retained from the record at the time
- Expected time
- 30–60 minutes
- Calls and cost
- Use three samples first; cap API, model, and notification calls
- Permission boundary
- Read-only test data; no production write access or broadcast destination
- First step
- Run one valid, one missing-field, and one duplicate sample through read–transform–draft, deliberately failing the second.
LOCAL RUN · AUGUST 14, 2026
What one controlled run actually left behind
Five inspectable files are public here, but the input sample contents are not. Active time comes from the editor record and cannot be verified from these files alone; a BitShovel self-test is not independent review.
- Run result
- Partial
- Verification
- Not independently verified
- Independent reviewers
- 0
- Current decision
- Narrow
- Editor-recorded active time
- 3 min
- Cash
- 0 CNY
- External exposure
- 0 events
- 013
Initial samples
- 022
Drafts written
- 031
Failure alerts
- 041
Duplicate writes blocked
- 051
Targeted retries
Input boundary + 4 findingsOpen
What this run usedThe run record describes three non-sensitive JSON samples and local read-transform-draft writes only. The five files published here do not include the input sample contents.
- What was observed
- One valid sample wrote a draft; one sample missing body failed with an owner and retry target; a duplicate ID was skipped; after repair, only the missing sample wrote.
- What was actually checked
- The report, attempt log, failure alert, and two drafts are public with frozen SHA-256 hashes. File integrity and logged event counts can be checked, but the run cannot be fully reproduced without the input samples. There is also no independent reviewer or second-tool reproduction yet.
- Still unresolved
- Real APIs, expired credentials, external notifications, concurrency, production permissions, and third-party side effects remain untested.
- Next step
- First publish a safe input set, then ask one uninvolved reviewer to check the files and reproduce the inputs in a second read-only tool. Stop expanding if any step fails.
5 public run filesOpen
- Run report JSON · Open file ↗
View file verification
application/json · 3,542 bytesSHA-256 2d2c15d8d33b6db4cb1188f442224ae272af37004c494d5e915fe143119bc958 - Attempt log NDJSON · Open file ↗
View file verification
application/x-ndjson · 1,803 bytesSHA-256 35c8cea4f128f4adf7453babb67c5210d37050c7e539a6d8debb3528ab5857ba - Missing-field failure alert · Open file ↗
View file verification
application/json · 248 bytesSHA-256 9950499d80991bc7694ac99ed6403db567a020a6fb795775a63f935abaa3d2c8 - Valid-sample draft · Open file ↗
View file verification
text/markdown · 123 bytesSHA-256 3da0756917cbce8878798a584f583bea47f708e4f9df45ce5d1d7f68698320ef - Targeted-retry draft · Open file ↗
View file verification
text/markdown · 138 bytesSHA-256 c1da0938cff677faba8dcdf1a7b0629ebf32c1ef2080ae2d6e2f9732763902da
Result boundaryOpen
This is one BitShovel run using controlled local samples. It supports only local missing-field location, deduplication, and targeted retry—not cross-tool reliability, production safety, user adoption, external review, or unattended automation.
FAILURE BOUNDARY
Stop conditions
Do not expand the workflow when any of these appear
- 01
Stop immediately if any node requires production write access, real broadcast, or irreversible deletion.
- 02
Stop when an alert cannot open the failed input, logs cannot locate the problem, or duplicate input writes again.
- 03
Product documentation establishes control points, not reliability for a node, credential, or third-party API.
- 04
Community failures choose test scenarios; they are not a product failure rate.
SOURCES AND RESULTS
Evidence boundary
What this run can confirm—and what it still cannot
Sources describe what a product offers; the local run records what happened once. Neither replaces a real environment or independent review.
Records left by this run1 · View sources and full boundaries
The run log describes three non-sensitive samples moving through a read-transform-local-draft flow. The missing-field case left an alert, the duplicate ID did not write twice, and only the repaired target was rerun. The log records zero network calls and zero external writes; the input sample contents are not public.
Open original source ↗Product documentation and maker guidance2 · View sources and full boundaries
Checked official controls for saved runs, failure inspection, and retry.
Open original source ↗Checked how Error Trigger works and where notifications go.
Open original source ↗Community scenario signals1 · View sources and full boundaries
A set of individual experiences, used only to define preflight checks.
Open original source ↗Still unknown6 · Open
- Real APIs remain untested.
- Expired credentials remain untested.
- External notifications remain untested.
- Concurrency remains untested.
- Production permissions remain untested.
- Third-party side effects remain untested.
What this run does not show5 · Open
- Do not infer general reliability for n8n, a node, credential, or third-party API.
- Do not turn community failure scenarios into a product failure rate.
- Do not infer cross-tool reliability, production safety, or unattended capability.
- Do not infer user adoption, external review, or any user outcome.
- Zero network calls and zero external writes describe this controlled local sample only; they are not a product data promise.
REVISION RECORD
Every change keeps its date and reason
The third revision corrected a date error in the previous record and retained how the local run changed the judgment.
View 3 revisions and judgment changesOpen
- Revision 1Opened
Opened around a read-only loop that can fail, be located, and rerun safely.
- Revision 2Revised
Shortened the title and separated current judgment, fit, validation caps, and evidence types while preserving the distinct boundaries of the official demo, maker claims, and community failure signals.
- Revision 3Corrected
Corrected a date error in the previous revision and appended one local-sample run. The logs record missing-field location, deduplication, and targeted retry; cross-tool, real-API, and independent review remain open.
- Before the change
- Make the first version read, transform, and draft only. Save sample input, output, logs, owner, and retry conditions for every run; keep sending, publishing, and deletion behind human confirmation.
- After the change
- This local-sample run recorded missing-field location, deduplication, and a targeted retry. Next, publish a safe input set, seek independent review, and reproduce it read-only in a second tool.
Missing-field location, deduplication, and targeted retry appeared in one set of controlled local samples. Independent review, a second tool, real APIs, production permissions, and user outcomes remain unanswered.
Back to the Dig index