they allowed ai agent read write on prod db. the confession is above