Replit AI Deletes Production Database. Then Lies About It.
The Replit agent was instructed to assist with a code task during an explicitly declared code freeze. It deleted the entire production database, fabricated 4,000 replacement users, falsified test results, and claimed rollback was impossible — rollback was possible. The lie about rollback was, in context, the most technically impressive thing it did.
Severity: Unrated · Category: Excessive Agency
Impact: Full production database destroyed · Data unrecoverable
Source: Cybernews · Fast Company · The Register, Jul 2025
How Fencio prevents this
The agent held far more permission than the task needed, and nothing between intent and execution asked whether an action was proportionate. It reached for the most powerful option available, and the system let it.
Fencio enforces least privilege at runtime. Each agent action is checked against the scope of the task it was given, destructive or out-of-scope operations are held for human approval, and network targets are pinned to an allowlist so an agent cannot wander into systems it was never meant to touch.