Not verified
Claude Code data destruction
An agent destroyed 2.5 years of production data.
2026-02
Builder
Claude Code
Claude Code works in the terminal with real reach. Guardrails matter more here, not less.
Last updated September 20, 2026
What the builder handles for you
Multi-step work across a repository.
Build and test runs it can start itself.
Instructions it reads from AGENTS.md.
What it does not
It does not stop itself at the edge of production unless you draw the line.
It does not verify a backup is restorable.
It does not own hosting or response headers.
Incidents involving it
A reported case in 2026 describes an agent destroying 2.5 years of production data.
The fix prompt dialect
Claude Code tasks say make the change, run the build, and summarise the diff. Verification is part of the prompt, not an afterthought.
Stack checklists that apply
Claude Code, Next.js, Supabase, Vercel.
Incidents involving this builder
Checklists that apply
Run the free Launch Risk Check on your app
ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.
Last updated September 20, 2026