The useful question is not whether marketing should be automated. It is which workflow has earned autonomy and under what controls.
Classify actions by consequence
Research, reporting and draft production are usually reversible. Public claims, customer messages, budgets, permissions and database changes carry different exposure.
A sound policy classifies the exact action rather than labeling an entire agent safe or unsafe.
Require evidence before execution
The system should know which source supports a claim, which version was approved, which audience will receive it and how success will be measured.
Missing evidence should create a blocked task, not a confident guess.
Use exact approvals
An approval for one message, audience, amount or file is not permission for a modified version. Exact-payload approvals prevent small edits from silently expanding authority.
Autonomy should be earned
Start with observation and drafts, then progress to bounded execution after the workflow demonstrates reliable quality, logging and recovery.
The unit of trust is the workflow—not the model.