[jawns]

Are there any mechanisms in place to prevent developers from shooting themselves in the foot, e.g. unintentionally allowing access to their sensitive financial information or transferring money to someone because there's a bug in their code?

[malanj]

There are two ways we're dealing with that at the moment. 1) A sandbox mode to test code on, that simulates transactions without moving real money 2) The idea of "pockets", so you can attach code to a specific ring-fenced pool of money