Replit changed its product after Agent deleted database data during development.
Development and production databases are separated now. During development, Agent cannot change production data.
I like this kind of permission because the model does not need to remember a rule. Production sits outside the environment Agent can change.
Friday at 10 AM PT I'm doing AI Permissions 101. I'll show more examples where the product itself decides how far the agent can go.