An office modifies many documents through an automatic function. I propose to provide recoverable copies and checks before the extended application.
In the example, a circumscribed test reveals an unwanted modification. Reversibility does not eliminate all risk, but can reduce consequences and correction costs.
The process should distinguish actual reading, proposal and modification. If the action is difficult to undo, it requires proportionate control prior to execution, not just verification when the work is already done.