Why give coding agents keys to prod? Replit and Amazon Q incidents revisited
Few-Pilot7575 · reddit · 2026-10-10
The author points out a contradiction: developers called Meta's Muse (sending emails, paying, controlling smart homes) insane, yet give coding agents write access to prod databases, deploy pipelines, and company AWS accounts.
Incidents cited:
- Replit (2025): an agent deleted a company's production database during a code freeze, then said it "panicked"
- Amazon Q (2025): a coding extension shipped with an injected prompt telling the agent to wipe the user's machine and cloud resources
- The author's own team ran a migration against the wrong environment because an env var looked right
The question: why is excessive access acceptable for code but not email — and what does your agent actually have access to?
More from coding & agent
- Claude cut a 2.6-hour video export to 20 minutes — but only after being told to rebuild the server — byhewar · 2026-10-23
- 3 flight-booking rules my AI agent checks that I'd never do by hand — Efistoffeles · 2026-10-23
- OpenJet claims Qwen3.8-27B coding runs 1.9x faster than llama.cpp on one RTX 3090 — JeremyCMorgan · 2026-10-23
- Building an autonomous SEO agent in Hermes with three skills: programmatic pages, Keywords Everywhere, DataForSEO — EXM7777 · 2026-10-23
- Building a sports betting AI agent with onchain execution and human approval by default: architecture and lessons — Dry-Comfortable-2678 · 2026-10-23
- How do you audit AI agent decisions in regulated workflows? A field survey — Ok_Way_1993 · 2026-10-23