# Infrastructure

> Keeping agents from deleting or changing cloud infrastructure, Terraform state and Kubernetes resources.

Web page: https://vinescale.com/blog/tags/infrastructure/

Agents can run terraform, kubectl and cloud CLIs with whatever credentials are loaded in the shell. These guides cover keeping destroy, delete and apply away from production, on the agent's side and in the tools themselves.

- [When AI coding agents deleted production: 18 real incidents and lessons](https://vinescale.com/blog/ai-coding-agent-incidents.md) (2026-10-31): Eighteen publicly reported AI coding agent incidents, from deleted databases and repos to wiped cloud infrastructure, with what each agent did and the lesson.

## Browse by topic

- [Claude Code](https://vinescale.com/blog/tags/claude-code.md): Running Anthropic's Claude Code safely: hooks, permissions, settings and guardrails.
- [Hooks](https://vinescale.com/blog/tags/hooks.md): Using agent hooks to check, warn about or block an action before it runs.
- [Permissions](https://vinescale.com/blog/tags/permissions.md): Allow lists, deny lists, approval modes and credentials for coding agents.
- [Databases](https://vinescale.com/blog/tags/databases.md): Protecting production databases from destructive queries and unsafe migrations by AI agents.
- [Incidents](https://vinescale.com/blog/tags/incidents.md): Public incidents where AI coding agents broke something, and what they teach.
- [Guardrails](https://vinescale.com/blog/tags/guardrails.md): The general practice of putting safety checks between an AI agent and the systems it can change.