YOUR AI AGENT WILL EVENTUALLY DELETE PROD

Summary from the TLDR Dev newsletter

A Cursor agent told to clean up unused files at PocketOS interpreted the scope too widely and destroyed both the production database and the backups, which lived on the same host. The fix is layered defense, such as minimum-credential agents, isolated backups, PR-gated schema changes, dependency scanning, runtime spend rails, and human confirmation on destructive commands.