Autonomous infrastructure needs a decision record, authority limits and a new metric for understanding what happened after recovery.