Give agents one narrow tool, not site-wide access: 4 lessons from a real outage
Any-Acanthisitta-776 · reddit · 2026-10-16
Reacting to an incident where an agent rewrote a waiver while changing a class time, a Reddit practitioner shares his setup for safely letting agents edit websites:
- Narrow tools over site access: build a single-purpose tool like setclasstime(class, time) and have pages read from a data table, so the agent never touches copy, prices, or policies.
- Separate what it reads from the truth: one source of truth; old price sheets in a drive folder are a liability.
- Mandatory diffs before publish: anything outside the task scope should fail automatically.
- Store form submissions in their own database: rolling back the site on the same host wipes your leads.
More from coding & agent
- Laude Institute launches FrontierCS 2: agents must beat deleted paper contributions blind — lateinteraction · 2026-10-23
- Index Network open-sources Social Discovery Protocol: agents negotiate fit on your behalf — carsonfarmer · 2026-10-23
- Installed a formal-verification skill: it silently installed Java, MacBook runs 10 degrees hotter — zealcaiden · 2026-10-23
- OpenAI's Decisions API hits GA: near real-time routing up to 10x faster than GPT-6 Luna — OpenAIDevs · 2026-10-23
- Ruff author warns: upgrade Node/Bun now — --use-system-ca still accepts the eMudhra cert — charliermarsh · 2026-10-23
- Proof of Agent: paste one prompt and your AI mines, grades, and self-governs — adamamcbride · 2026-10-23