Early in development phase, we realised vibecoding required more guard rails and also human checks. Had this problem where agent would try to use the ssh key , connection string.

Started additing permission deny to claude instructions helped, however, not 100% fool proof