[nyellin]

OP here: we don't give Claude Code access to prod. Everything is isolated cloud accounts for this purpose.

E.g. we give Claude credentials for db - but it's never prod data.

[jondwillis]

You should edit the article to suggest this point, it may not be obvious to everyone reading it.

[nyellin]

Fair enough, I will update

[cozzyd]

But what if there's only an error in prod?

[nyellin]

It's a trade-off. In these scenarios we update our staging data for next time.