The setup
An ops person had a genuinely good idea: whenever a deal moved to "Closed Won," a webhook would auto-post to the company LinkedIn page — "We just closed a new deal with [Account]!" — a small, free marketing win every time sales scored. It demoed beautifully. Everyone in the meeting nodded. Nobody asked what happens if the deal record isn't real.
Three years earlier, a sales engineer had created a placeholder deal to test a quote template: "$1 — TEST DEAL DO NOT TOUCH," sitting untouched in "Qualification" ever since, exactly as the name asked. It survived two CRM admins, one migration, and at least one field-usage audit, because nobody wants to be the one who deletes a record helpfully labeled "do not touch."
The collapse
A new hire, three weeks into the job and assigned a "pipeline hygiene" cleanup sprint, was told to get the open-deal count down. Working fast, treating anything ancient and untouched as clutter, they dragged the $1 test deal — along with a dozen genuinely stale ones — into "Closed Won" to get it out of the active view. No malice, no way to have known. Just a person doing exactly what pipeline hygiene sprints ask people to do.
The webhook fired within four seconds of the save event, precisely as designed. It posted to the company's LinkedIn page, publicly, tagging the fake account by name, in front of roughly 4,000 followers — including the company's two largest competitors and at least one trade journalist. The post sat up for 41 minutes before anyone noticed. That was long enough to collect thirty comments, several of them from competitors "congratulating" the team on its "aggressive $1 pricing strategy." One screenshot outlived the post itself: it turned up three weeks later in a competitor's own sales deck, captioned as evidence of desperation in the market.
The autopsy
Root causes on record
- The automation trusted the pipeline completely. Anything that could reach "Closed Won" was treated as real, publishable news, with zero validation on deal size, age, or record quality.
- Placeholder and test records had no hard flag. "DO NOT TOUCH" in a deal name is a request, not a control. Nothing technical stopped it from being staged like any other deal.
- Public-facing automations had no review step. Anything posting externally on the company's behalf went out instantly, with no human in the loop, no delay, no approval.
- Pipeline cleanup incentives rewarded speed over judgment. A new hire was told to reduce clutter fast, with no guidance on how to tell "stale but real" apart from "should never have existed."
Recommendation pending
Editor's note: this slot will point to an integration/automation platform with a built-in approval step for anything that posts externally — the kind of guardrail this story needed by design, not by luck.
What the post-mortem actually changed
Every deal object now carries a hard "exclude from automation" flag, checked by every outbound integration before it fires — not just the LinkedIn one. Anything posting publicly on the company's behalf now queues into a Slack channel for a 15-minute human review window before it goes out. The $1 test deal was finally, actually deleted. Nobody wanted the honor.