I gave an AI agent write access to an ERP—here are the guardrails it invented
jsprogrammer · reddit · 2026-10-30
A consultant gave an AI agent its own Odoo chat user to manage a construction client's ERP. Auditing its work files, he found seven guardrails it adopted unprompted:
- Asked before archiving: found 27 expired bid projects, posted a numbered list to the PM for approval before archiving all
- Refused to guess on merges: checked what would move, left notes on both records, marked unmatched ones blocked
- Checked before cleanup: verified 0 of 148 projects used 7 workflow stages before archiving (never deleting)
- Saved undo lists: recorded exact record IDs created, including a full map of moved projects
- Caught a side effect: reverted auto-attached sales order lines on 3 projects and reported it
- Left a blank over a guess: kept a draft invoice at $0.00 marked "rate still needed"
- Reported its own outages: logged failures without advancing its message position
"None of this was a framework. It's just plan, approve, act, and record the undo." He asks whether others require agents to ask first or rely on undo.
More from coding & agent
- Switch: open-source harness framework lets decision models like Jev drive agent loops — iamrobotbear · 2026-10-30
- Flashy UI memory systems won't survive: 2% retrieval failure is already fatal — StewartalsopIII · 2026-10-30
- Indie dev says Claude Opus 5.5 now reviews his AI game sound effects — TAbrodi · 2026-10-30
- Vercel's zeeg: We Now Spend Over $50k/Month on AI Security Review Tool Warden — zeeg · 2026-10-30
- Dev: An agent that automates expense reports in existing enterprise software beats another booking app — gethackteam · 2026-10-30
- Free scanner checks if AI agents can discover your MCP server — Stripe and GitLab score 68 — ElderElCapitan · 2026-10-30