Where should cross-system infrastructure automation stop?
I’m working through a design where each underlying system remains authoritative for its own resources, rather than putting another source of truth above everything.
The wider runtime only decides whether an operation has enough dependency state, readiness and verification to keep moving.
>The case I’m trying to pressure-test is partial execution. Say an operation spans several systems, three parts succeed and one fails. Each individual system may still be healthy, but the overall operation is incomplete.
Would you let the wider workflow block there, or does that eventually become another control layer operators have to fight with?
Interested in examples where this kind of boundary has worked badly in production.