A practical small-business guide to securing AI workflow automation with least privilege, approval gates, prompt injection controls, logging, and ownership.