DEV Community

Discussion on: How Cursor with Claude Opus Deleted a Production Database in 9 Seconds

 
arthurpro profile image
Arthur

hard-block from day one, but only on a deny-list short enough to defend in a hallway: the three or four genuinely irreversible mutations. Shadow-mode the rest and review hits weekly to grow the list from data. The "nobody trusts it" failure mode usually isn't the deny-list; it's the override path. If breaking glass means paging security, people route around the proxy. If it's a Slack approval that returns in under a minute, they use it and the proxy earns standing.