Connect's work engine can create orders, email customers and mark invoices paid. That's useful only if you can trust it, so anything that changes a real record or contacts a customer shows a confirmation card with exactly what will happen.
The server remembers what was proposed and executes that — not whatever a browser sends back later — so a request can't swap in a different action after you approve.
Where you're happy for it to act alone, Settings → Work Automation lets you switch on specific low-risk actions. Deletes and everything else always ask. And whatever it does is logged in the AI action log, with Undo where undoing makes sense.
Finally, the work engine never says something worked until the action has actually succeeded.