Spent time this year writing Ansible for tasks with real consequences — remote account management, service restarts on boxes I was actively connected to.
The lesson that stuck: automation touching your own access path (SSH, auth) needs to be asynchronous and reversible by design — "did it work" can't depend on the exact session you just modified.