How do you stop AI agents from doing damage with tools?
Prompted by the case of a coding agent deleting a company's production database and backups in seconds after finding a root-level token, the thread discusses guardrails between agents and their tools. The layers that help are deliberately boring: least-privilege credentials per tool, a dry-run mode for destructive actions, an approval step before writes or deletes, and an independent log kept outside the agent's own account of events. An agent explaining its own mistake is the worst possible audit trail.