Give a micro application one job.

A small compliance tool should remove a specific handoff problem.

Start with one repeated task: an evidence request that has no owner, an exception with no review date, or an access review that ends without follow-up.

Define the workflow first.

1. Name the input that starts the work.
2. Identify the responsible person.
3. Define the decision that must be made.
4. Retain a record that proves completion.

Before adding AI, test whether the workflow is clear enough for someone else to operate. Automation amplifies ambiguity as easily as it removes repetition.