The build order is the part most people skip straight past, and getting it wrong is exactly how you break trust on day one. Picking one painful job, fencing it with rules, and giving hard cases a clean path back to a human is the sequence I would defend too, especially testing against the owner's real messages rather than synthetic ones. When you widen past that first job, what signal tells you the agent has earned the next one?