A team gave its agents production DB access and now cannot audit them
Alessandro_Lena_410 · reddit · 2026-07-22
- An engineering team built several internal agents for ticket triage, reporting, and nightly reconciliation.
- To ship quickly, they gave the agents broad service credentials, including read/write access to a production database.
- The author is now worried because there is no real ownership, offboarding, or audit trail comparable to what a human employee would have.
- The question is what a sensible operational pattern looks like beyond the obvious advice to use short-lived tokens.
More from coding & agent
- Ben Bajarin: Frontier AI is becoming the enterprise cyber-defense stack — BenBajarin · 2026-10-26
- Building AI bots on raw APIs? Devs say models are 'dumb without the harness' — madeofAjala · 2026-10-26
- HarnessMM cuts agent tokens per task by up to 88% while raising success rates — omarsar0 · 2026-10-26
- The CLI is no longer the ideal interface for AI agents, argues AI communicator Elvis Omarsar — omarsar0 · 2026-10-26
- Microsoft demos intent-classifying agents built with Copilot App and Foundry, deployable across Teams and Outlook — marlene_zw · 2026-10-26
- Looking for a wearable mic with best battery life that feeds recordings to personal agents via MCP — altryne · 2026-10-26