Automation savings evaporate quietly. A bot breaks, a person quietly resumes the manual task, and nobody updates the business case.
The fix is unglamorous: design exceptions before the happy path, externalise business rules so policy changes do not need a release, keep an immutable log of every automated action, and give each automation a named owner with an SLA.
Auditors do not object to automation. They object to automation that cannot explain itself.