Ahnii!
https://jonesrussell.github.io/blog/content-autopilot/ covers how this blog's Content Autopilot workflow mines, curates, and publishes without a human reading the draft first. Three things broke or needed hardening after that pipeline went live: how it pays for Claude, why the auth silently died, and the two gates bolted on afterward to catch a bad draft before it ships.
Switching off pay-per-token API credit
The produce step originally authenticated with ANTHROPIC_API_KEY, a pay-as-you-go API account billed per token. That account ran dry, and the daily cron started failing on the very first Claude call. Swapping to CLAUDE_CODE_OAUTH_TOKEN fixed it in one line: this env var runs the headless CLI against a Claude subscription instead.
env:
