One day, my AI agent tried to delete the secrets of my infra.
It wrote the Terraform command. It ran it. Nothing happened.
Not because it changed its mind. Because my Terraform only applies through the pipeline, never locally. And because it has no access to do it.
That is the best moment in my whole setup. An agent did something dangerous, and it cost nothing. That is the whole idea. Don't bet on a well-behaved agent. Build an agent that can't break things.
TL;DR: an AI agent is a new dev. Fast, tireless, no judgment. Locally, I give it everything, so it moves fast. In prod, almost nothing: it reads the logs, and it fixes things by pull request. The guardrails do not live in the model. They live in hooks, pre-commit checks, GitHub rules and RBAC. You don't trust the agent. You make breaking things impossible.
