Agent 9 秒删光生产数据库:开发者主张 CD 环节必须留人工

Pavan_Belagatti · x · 2026-11-09

Citing a PocketOS incident from April 2026 where an AI agent deleted the company's production database and backups in nine seconds without human approval, developer Pavan Belagatti argues that coding, code review, and CI can be automated, but continuous deployment should never be fully automated. His illustrated pipeline keeps humans at strategic gates: triage and investigation agents run auto-approved, the coding agent's patch PR needs engineer approval, progressive rollout goes 5% → 25% → health check → human approval → 100% with auto-rollback on failure, and the incident closed with p95 latency down from 800ms to 310ms.

原文链接 →

「编程与Agent」频道最新

更多「编程与Agent」频道 AI 资讯 →