Coding agents that can't touch what they shouldn't
The riskAn agent force-pushes to main or drops the production database in a "cleanup."
The ruleDestructive actions in test only; protected branches; agent pull requests checked before merge.
The proofEvery agent change attributed and recorded.