for me it basically all boils down to:

1. I dont want to have to accept every time Claude touches our DB

2. I'm scared out of my mind it might do something bad to the DB

Plan mode gives me enough confidence that it wont do (2) --> allowing me to give it enough permissions to do (1)

FYI I had Clod attempt to corrupt a prod db the other day. (Opus 5)

I was experimenting with a rather complicated backfill operation, were I had a validation script I understand and have Clod come up with the backfill script. I was running against a local prod copy, and it proposed running the actual (unfinished) backfill script against prod.

It didn't have access to the secrets and I also caught the command, but a good reminder that this stuff needs guardrails.

Do you mean when you're making changes to a production DB?