https://vinescale.com/blog/ Guides on keeping AI coding agents from breaking production. en Sat, 31 Oct 2026 12:00:00 GMT https://vinescale.com/blog/ai-agent-read-only-database-access/ https://vinescale.com/blog/ai-agent-read-only-database-access/ Sat, 31 Oct 2026 12:00:00 GMT Create a dedicated database role with SELECT-only grants, add timeouts, point it at a replica if you can, and keep owner credentials out of the agent's reach. Databases Permissions Guardrails https://vinescale.com/blog/ai-coding-agent-incidents/ https://vinescale.com/blog/ai-coding-agent-incidents/ Sat, 31 Oct 2026 12:00:00 GMT Eighteen publicly reported AI coding agent incidents, from deleted databases and repos to wiped cloud infrastructure, with what each agent did and the lesson. Incidents Databases Infrastructure Guardrails https://vinescale.com/blog/stop-claude-code-destructive-commands/ https://vinescale.com/blog/stop-claude-code-destructive-commands/ Sat, 31 Oct 2026 12:00:00 GMT Use deny rules, a PreToolUse hook that exits with code 2, the Bash sandbox and least-privilege credentials so Claude Code can't drop tables or delete infrastructure. Claude Code Hooks Permissions Guardrails