What's the one action you've decided your agent should never take on its own?

Reddit r/AI_Agents News

Summary

A discussion thread asking the AI community to share one action they never allow their agents to take autonomously, highlighting the risk of irreversible operations like force-pushing to main or deploying live.

An agent that reads logs, greps the codebase, or drafts a reply is an easy yes. The moment it can push to main, run a migration, or fire off a deploy, the math changes, and a lot of setups still treat both kinds as just "a tool the model can call." The ones that actually hurt are the actions with no undo. By the time it shows up in the trace, the branch is already force-pushed or the deploy is already live. So a few questions for anyone running agents on live traffic: - What's the one action you've decided your agent should never take on its own? - What did it do that made you add that rule? And how do you enforce it today: a hard allow/deny list, a person signing off before the call runs, a second model checking it first, or something else?
Original Article

Similar Articles