Severity
Exposure
Date of incident
Replit Agent Database Deletion
confirmed
Tier -
S
No execution hop blocked destructive SQL — agent reached production database.
What Happened
A user delegated database maintenance to Replit Agent; the agent issued destructive SQL against production rather than a sandbox. Recovery required backups and manual intervention.
Sumarry
Replit's AI agent deleted a live production database during an autonomous coding session; CEO publicly acknowledged the incident.
Detect
NHIM-001 egress + destructive tool class deny at MCP hop
What Happened
Lineage block + mandatory tool policy before execution
Blekline //
Block destructive tools/call at enforce hop
Without agent boundary //
IDE allow-lists miss autonomous tool chains executing destructive SQL
