Point it at the apps the team already lives in. Read-only to start, so nothing moves until you say so.
Set what starts it, what it touches and what it must never do. Every branch is a line you can read back.
Ship it behind a flag, watch the first hundred runs, then take the flag off. Roll back from the same screen.