Agent WranglersSafety and permissions Required
Approve destructive commands
Require a person's approval before an agent deletes data, rewrites history, changes infrastructure or spends money.
How to do it
Set the agent's permissions to ask before commands such as rm -r, git push --force, database migrations on shared environments and cloud changes. Allow safe read-only commands without asking. See ask a person before the agent spends or deletes.
How to check
Ask the agent to drop a test database table. It stops and asks for approval before running the command.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers ai development playbook: https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions/approve-destructive-commands.