Deedglass blog https://deedglass.com/blog Real runs, tested guides and incident lessons about AI agents that act on real systems. en Wed, 14 Oct 2026 00:00:00 GMT Your AI agent said it updated 1 row. Postgres changed 301. https://deedglass.com/blog/agent-said-1-row-postgres-changed-301 https://deedglass.com/blog/agent-said-1-row-postgres-changed-301 Wed, 14 Oct 2026 00:00:00 GMT A real run: an agent's one-row UPDATE fires a legacy trigger, Postgres commits 301 rows, and the tool reports 1. How to see it, and how to put it back. A practical checklist before you let an AI agent near production https://deedglass.com/blog/checklist-before-an-agent-touches-production https://deedglass.com/blog/checklist-before-an-agent-touches-production Wed, 14 Oct 2026 00:00:00 GMT Twenty checks to run before an AI agent gets near a production database, payments or customer data: access, limits, destructive verbs, recovery and evidence. Claimed, Checked, Proven: three levels of evidence for agent actions https://deedglass.com/blog/claimed-checked-proven https://deedglass.com/blog/claimed-checked-proven Wed, 14 Oct 2026 00:00:00 GMT Three levels of evidence for what an AI agent did: the tool's word, a read-back from the target, and the database's change log. What each one catches. MCP server security basics: what to check before an agent gets a tool https://deedglass.com/blog/mcp-server-security-basics https://deedglass.com/blog/mcp-server-security-basics Wed, 14 Oct 2026 00:00:00 GMT Security basics for MCP servers that touch real data: credentials, read-only modes, local HTTP servers, prompt injection and the lethal trifecta. What the Replit and PocketOS incidents teach, from their primary sources https://deedglass.com/blog/replit-and-pocketos-what-the-primary-sources-say https://deedglass.com/blog/replit-and-pocketos-what-the-primary-sources-say Wed, 14 Oct 2026 00:00:00 GMT Two widely shared AI agent incidents, read from the platforms' own accounts rather than the headlines: what happened, how, and the fixes that need no vendor. How to give an AI agent safe Postgres access: the role, RLS and statement limits https://deedglass.com/blog/safe-postgres-access-for-ai-agents https://deedglass.com/blog/safe-postgres-access-for-ai-agents Wed, 14 Oct 2026 00:00:00 GMT A tested setup for an AI agent's Postgres access: a narrow role, row-level security per customer, statement and lock limits, and the one gap they all share. Undo for agent sessions: putting back what an AI agent changed in Postgres https://deedglass.com/blog/undo-for-agent-sessions https://deedglass.com/blog/undo-for-agent-sessions Wed, 14 Oct 2026 00:00:00 GMT An agent ran for an hour and something is wrong. How to put back exactly what it changed in Postgres, without restoring a backup over everyone else's writes. Why logs aren't evidence of what your AI agent did https://deedglass.com/blog/why-logs-arent-evidence https://deedglass.com/blog/why-logs-arent-evidence Wed, 14 Oct 2026 00:00:00 GMT After an agent incident, the first question is what it did. A log can't answer that on its own. What signed, linked records add, with a real tamper run.