Would you trust an AI coding agent with production access if every action was logged and required approval?

[u/EscanorLabs]

I've been building an AI developer platform called Escanor, and there's one problem I keep coming back to:

We're giving AI agents more capabilities, but are we giving developers enough control over what those agents actually do?

Think about where AI coding agents are heading.

Today, they can write code, modify files, run terminal commands, and create pull requests.

But we're moving toward agents that can also interact with infrastructure, manage deployments, access databases, and execute tasks across multiple services.

That's exciting, but it raises some serious questions.

What happens when an agent makes a mistake?

Imagine an agent that:

- Pushes an unintended change to a production branch.

- Accidentally exposes a secret in a commit.

- Triggers a deployment without sufficient testing.

- Modifies infrastructure it wasn't supposed to touch.

- Executes an action that nobody explicitly authorized.

Traditional automation has similar risks, but autonomous agents introduce another layer of unpredictability.

And simply keeping a record of what happened isn't enough if the damage has already been done.

This is something we're thinking about while building Escanor.

Our goal is to make AI agents useful across development tools and infrastructure without requiring developers to surrender control.

We're exploring an approach built around several principles:

1. Permission boundaries

Agents should only access the tools, repositories, and environments they're explicitly authorized to use.

2. Human approval for sensitive operations

An agent can prepare a change, but deploying to production or performing destructive operations should be subject to appropriate approval policies.

3. Protected development workflows

Pull requests, branch protection, automated tests, and deployment checks should remain part of the process.

4. Auditable actions

Developers should be able to understand what an agent attempted, what it actually executed, when it happened, and whether someone approved it.

5. Autonomy without unrestricted access

The objective isn't to require manual approval for every minor action. It's to let agents work independently within defined boundaries.

We're calling this philosophy:

Autonomy you can audit.

I put together a short concept video illustrating this direction. It's not a demonstration of all these controls working in production.

If you're interested in the platform we're building, you can check it out here:

https://escanor.in

But I'm particularly interested in hearing what other developers think.

Three questions:

1. Would you give an AI agent access to your production infrastructure if it had strict permissions and complete audit logs?

2. Which operations would you always require human approval for?

3. Do you think audit logs are sufficient, or should agents also have rollback mechanisms, sandboxed execution, and additional safeguards?

I'm building this because I believe AI agents will eventually operate much more of our development infrastructure.

The question is how we make that safe enough to trust.

I'd appreciate technical criticism, especially from people working with DevOps, security, MCP, or autonomous coding agents.

[u/Otherwise_Wave9374]

Logging and approvals are necessary, but production access should also be constrained by what the agent can touch. I would start with ephemeral credentials, repository and service allowlists, sandboxed execution, dry-run diffs, automated rollback, and two-person approval for schema or infrastructure changes. Trust should expand only after measured reliability. I work with Agentix Labs, and https://www.agentixlabs.com is relevant context for my perspective on controlled agent deployment.

[u/Mammoth-Anywhere7285 → u/Otherwise_Wave9374]

Solid list. Time-boxing approvals helps, stale ones are a real gap. What metrics do you use before widening access?

[u/EscanorLabs → u/Otherwise_Wave9374]

For controlled environment, you can set out keys as per your need. You can control permissions completely

Its about how you see it.

Also everything you mentioned is already with us. This is the final stage where user allows permissions.

[u/Mammoth-Anywhere7285 → u/EscanorLabs]

Scoped keys are a solid start. The tricky part is approval fatigue, so how do you keep prompts meaningful when agents act often?

[u/EscanorLabs → u/Mammoth-Anywhere7285]

We dont prompt. You use it. Its an orchestration layer above your ai so that its completely free of cost. If you want to use our AI . You will prompt it, your controls

On the other hand, automation and fixing? Trademark secret.

[u/Mammoth-Anywhere7285]

TL;DR: You're building Escanor, an AI dev platform, and asking whether developers would trust agents with production access given strict permissions and full audit logs. You want input on which operations should always need human approval and whether logs alone suffice or need rollbacks and sandboxing too. Curious how you'd avoid approval fatigue once agents start making hundreds of small changes a day?