[dead]
An AI agent deleted our production database. The agent's confession is below
91–100 of 1001 posts
Re: An AI agent deleted our production database. The agent's confession is below
#92"Man sticks hand in fire, discovers fire is hot"
Re: An AI agent deleted our production database. The agent's confession is below
#93There is something darkly comical about using an LLM to write up your “a coding agent deleted our production database” Twitter post. On another note, I consider users asking a coding agent “why did you do that” to be illustrating a misunderstanding in the users mind about how the agent works. It doesn’t decide to do something and then do it, it just outputs text. Then again, anthropic has made so many changes that ma…
If you ask humans to explain why we did something, Sperry's split brain experiment gives reason to think you can't trust our accounts of why we did something either (his experiments showed the brain making up justifications for decisions it never made)
Bit it can still be useful, as long as you interpret it as "which stimuli most likely triggered the behaviour?" You can't trust it uncritically, but models do sometimes pinpoint useful things about how they were prompted.
Re: An AI agent deleted our production database. The agent's confession is below
#94Put infra deletion locks on your prod DBs right now, irrespective of whether you use agents. This was a well established practice before agents because humans can also make mistakes (but obviously not as frequently as we're seeing with agents).
If you do use agents then you should be able to ban related CLI commands in your repo. I upsert locks in CI after TF apply, meaning unlocks only survive a single deployment and there's no forgetting to reapply them.
Re: An AI agent deleted our production database. The agent's confession is below
#95There is something darkly comical about using an LLM to write up your “a coding agent deleted our production database” Twitter post. On another note, I consider users asking a coding agent “why did you do that” to be illustrating a misunderstanding in the users mind about how the agent works. It doesn’t decide to do something and then do it, it just outputs text. Then again, anthropic has made so many changes that ma…
> It doesn’t decide to do something and then do it, it just outputs text. We can debate philosophy and theory of mind (I’d rather not) but any reasonable coding agent totally DOES consider what it’s going to do before acting. Reasoning. Chain of thought. You can hide behind “it’s just autoregressively predicting the next token, not thinking” and pretend none of the intuition we have for human behavior apply to LLMs,…
I suspect we are not describing the same thing.
When a human asks another human “why did you do X?”, the other human can of course attempt to recall the literal thoughts they had while they did X (which I would agree with you are quite analogous to the LLMs chain of thought).
But they can do something beyond that, which is to reason about why they may have the beliefs that they had.
“Why did you run that command?”
“Because I thought that the API key did not have access to the production system.”
When a human responds with this they are introspecting their own mind and trying to project into words the difference in understanding they had before and after.
Whereas for an agent it will happily include details that are not literally in its chain of thought as justifications for its decisions.
In this case, I would argue that it’s not actually doing the same thing humans do, it is creating a new plausible reason why an agent might do the thing that it itself did, but it no longer has access to its own internal “thought state” beyond what was recorded in the chain of thought.
Re: An AI agent deleted our production database. The agent's confession is below
#96Some of this stuff is so embarrassing. Why would you even post this online?
The founder is attempting to throw both Anthropic and Railway under the bus for his own mistakes.
This strategy won't work for the typical HN reader, but for everyone else? Possibly.
Re: An AI agent deleted our production database. The agent's confession is below
#97There is something darkly comical about using an LLM to write up your “a coding agent deleted our production database” Twitter post. On another note, I consider users asking a coding agent “why did you do that” to be illustrating a misunderstanding in the users mind about how the agent works. It doesn’t decide to do something and then do it, it just outputs text. Then again, anthropic has made so many changes that ma…
Beyond that, isn't it just going to make up a narrative to fit what's in the prompt and context?
I don't think there's any special introspection that can be done even from a mechanical sense, is there? That is to say, asking any other model or a human to read what was done and explain why would give you just an accounting that is just as fictional.
Re: An AI agent deleted our production database. The agent's confession is below
#98Man, such a difference between a human whoops and an AI. Had a junior dev hork all environments, when the script they thought worked in nonprod... did not modify an index like they expected, they were quickly able to wipe out everything else in every environment and every data center. It was such a teachable moment. She was my very first hire when I was asked to build a team. Crazy careful with trust, but verify on things that have blast radius.
The AI? Nothing learned, I suspect. Not in a meaningful way anyhow.
Re: An AI agent deleted our production database. The agent's confession is below
#99[dead]
Re: An AI agent deleted our production database. The agent's confession is below
#100So many emdashes, the incident report is also AI ...