A Valid Key Let an AI Agent Delete Production - Sagar Batchu, Speakeasy

Sagar Batchu

Talks worth your time · Claude Code & Anthropic · 2026-11-03 · 21 min · 10 pages

A coding agent tried to fix a staging problem and deleted a production database and its backup instead. It did this with valid credentials. Sagar Batchu of Speakeasy uses that incident to lay out a control layer for agents in regulated industries. Every action is tied to an identity, checked against policy in real time, never allowed to exceed its owner's rights, and recorded for compliance. 0:00 Intro 1:21 The agent that deleted production 3:43 How this is playing out across the industry 4:48 What we already expect from people 5:26 A control layer for agents 8:26 Connect, inspect, decide, record 12:51 Recording what happened for compliance 15:20 Summary: valid credentials aren't valid intent 16:36 Q&A Sagar Batchu, Speakeasy: https://www.speakeasy.com Join us in SF for the second annual AIE CODE summit: https://aie.codes our last flagship summit of 2026. Applications live now!

Generated automatically from the recording's transcript. It's meant to replace re-watching, not the recording itself — verify against the video at the timestamp before quoting formally. Slides belong to the speakers and organisers. Produced with recording-to-pdf.