let it have access to anything in production. Or letting it directly do anything with a database, even in dev. If there's a routine task you want it to do, have it generate a script, then you run that script. A lot of people having issues with AI are because they're using it carelessly (which may be partially the result of the companies hyping how it can do everything). Though runaway AI is a concern that serious, thoughtful people have had for a long time. But in this case, they needed better procedures. At my job, doing anything in production requires certain permissions and approvals and it's a whole ordeal, but for good reason.