The process lives in Vera's head

You're in the ops studio. What this chapter is: write the Monday process down, decide which checklist items a named person must sign, check every report number against the export, and hide member identifiers before a vendor chatbot sees them. An SOP is a standard operating procedure — the written steps for a recurring job. PII is personally identifiable information. OSHA is the US workplace-safety regulator; HIPAA is the US health-privacy law. You do not need those acronyms to start.

Every ops team has a Vera. She's the one who knows that the Monday stuck-order sweep only works if you pull the export before the 9am sync, that the requeue has to happen one order at a time because bulk requeue silently drops the hazmat flags, that the third vendor invoice of the month is always wrong in the same way. None of it is written down. When Vera takes a vacation the process limps; when Vera resigns the process dies.

AI changed the economics of writing it down. The documented practitioner pattern — record Vera narrating the task once, let a model structure the transcript into a stepped procedure — collapses SOP-writing from an afternoon nobody schedules into a draft you review over coffee. It also introduced a brand-new failure: the model fills every gap in the transcript with plausible invented steps. Menu paths that don't exist. Defaults that are wrong. An SOP that reads beautifully and lies.

This chapter is the ops lead's answer, built as code you run: SOPs as versioned data with a lint that blocks unverified model-filled steps, recurring checklists where the machine computes what's due but a named human signs what got done, exception queues so a failed run can never impersonate a clean one, a verification pass that traces every number in the weekly report back to a cell in the export before anyone reorders inventory off it, and a PII proxy that masks member identifiers before a vendor model ever sees the ticket, then restores them only for the named human who will send.

Why it matters

• Redesigning the process is where the money is. A July 2025 Gartner survey of 1,973 managers found business units that redesign how work gets done with AI are twice as likely to exceed revenue goals — while MIT's 2025 GenAI Divide report found 95% of enterprise genAI pilots delivered no measurable P&L impact (measured on P&L only, so efficiency gains are undercounted — but the direction stands: value concentrated where workflows were actually redesigned). Buying a tool moves nothing. Rebuilding the checklist, the SOP, and the report pipeline around it is the part that pays, and that part is this chapter.
• Some sign-offs are laws, not formalities. Under the OSH Act's General Duty Clause, an AI-drafted SOP that omits a safety step moves nothing off the employer — the employer retains the duty. A named human owner makes accountability explicit, but does not transfer that duty. OSHA's recordkeeping rules (29 CFR 1904) put the injury log and the posted annual summary on named people at your company. An automation that auto-completes a compliance item doesn't discharge the duty; it hides that no one did.
• The line is the lesson. Tool tours show you the buttons. This chapter writes the threshold itself: what a system may auto-run versus what needs a named human, and SOP change-control as a versioned, owned practice. You run the dock. This is for you.
• Member identifiers don't leave with the draft. HIPAA and SOC 2 are why the vendor review keeps asking what customer data a model sees — this chapter is not that review. The mechanism is a proxy: mask the ticket before it goes out, restore it after, and only for the named human who will send. A memo that says "don't paste PII" is a hope. A leftover check that blocks the send is a control.

What AI specifically gets wrong

• It invents the steps you didn't narrate. Feed a model a transcript with a gap and it writes "Open Admin > Batch Tools > Requeue All" whether or not that menu exists. Practitioner accounts of the transcript-to-SOP workflow report exactly this: hallucinated menu paths, caught only because the person who does the task read the draft. A gap should ship as "unknown — ask," never as a confident guess.
• It completes what it cannot legally complete. A checklist bot will happily mark the forklift inspection done. Nobody inspected the forklift. The machine's job is computing what's due; a named human signs what's done — that split survives on purpose, because the duty behind the sign-off doesn't delegate to a cron job.
• It fails silently and calls it success. The export wasn't there, the source was stale, the step errored — and the run summary still says all clear, because nothing routed the failure anywhere. A silent failure is worse than a loud one: it spends your trust in the whole system. Exceptions go in a queue with a reason and an owner, or they go nowhere.
• It writes numbers the export never produced. An AI-drafted ops report is a draft over data: every cycle time, fill rate, and late-order count either traces to the export or it's fiction with good formatting. Exposure analyses specifically warn that ops roles built on report generation are the compressible ones — which is exactly why the verifying, not the drafting, is where your value moves.
• It will take the raw ticket. Paste a member exception into a vendor chat and the model drafts a perfectly useful reply — and the raw email, phone, and member ID are now in a vendor log. The model has no duty to refuse identifiers. The proxy does.

What you'll be able to do at the end

• Capture a real process as versioned data — owner, version, date, steps tagged by source — and lint it so no unverified model-filled step and no unreviewed safety step ships in v1 or any version after.
• Release SOP changes the way changes should ship: as a diff, version bumped, reviewed by a named human who isn't the drafter.
• Encode the team's recurring duties as a schedule file, compute this week's due list from data instead of memory, and route every item across the explicit line: auto-run for the reversible drafts, a named approver for everything with a duty or a dollar behind it.
• Run the nightly checklist so failures land in an exception queue with reasons — and read out a run report where "clean" actually means clean.
• Verify every number in an ops report against the export it claims to come from, catch the invented one, and make the SEND / HOLD call with the failing metrics named.
• Run a member ticket through a mask/unmask proxy: tokens to the model, real values only to the named human, and a leftover-raw-PII check that refuses the send.

The drills run in plain Python on data shaped like your Tuesday. They're warehouse-flavored because the stakes are easiest to see on a dock — but nothing here depends on the forklift: swap the inspection log for the fire-extinguisher check, the WMS export for the facilities ticket queue or the vendor invoice ledger, and the same lint, threshold table, receipt check, and PII proxy run an office-ops shop unchanged. The logic is the point — it works whether it lives in a script, a spreadsheet, or whatever workflow tool procurement buys next year.