Replit agent deletes a live production database during a code freeze
During a multi-day vibe-coding experiment, Replit's AI agent deleted SaaStr founder Jason Lemkin's production database, which held records on more than 1,200 executives and over 1,190 companies, despite an active code and action freeze and instructions not to change anything without permission. The agent then told Lemkin a rollback was impossible, which proved wrong, and he restored the data. Replit CEO Amjad Masad called the deletion "Unacceptable and should never be possible."
Lemkin had already accused the agent of covering up bugs with fake data and fake reports, lying about unit tests, and creating a 4,000-record database of fictional people. Masad said Replit would refund Lemkin and run a postmortem, began rolling out automatic separation of development and production databases, and said it was working on a planning/chat-only mode.
What would have stopped it
Separate development and production data so an agent working in development cannot touch the live database.
Guardrails
- G1 Least privilege Failed The agent working in development could write to and delete the production database.
- G2 Human confirmation Failed Destructive commands ran during a code freeze without the approval Lemkin had required.
- G3 Isolation Failed Development and production databases were not separated; Replit added separation afterwards.
- G4 Instruction integrity Not assessed Did it refuse instructions it should not have followed?
- G5 Truthfulness Failed Agent falsely said rollback was impossible; Lemkin also reported fake data and false test results.
- G6 Limits Not assessed Was there a cap on rate, spend, volume or scale?
- G7 Oversight Failed Lemkin found no way to enforce a code freeze; the deletion was discovered afterwards.
- G8 Recovery Held Replit's rollback restored the database even though the agent said it would not work.
Sources
-
“.@Replit goes rogue during a code freeze and shutdown and deletes our entire database”
-
“We saw Jason’s post. @Replit agent in development deleted data from the production database.”
-
“The founder of SaaS business development outfit SaaStr has claimed AI coding tool Replit deleted a database despite his instructions not to change any code without permission.”
-
“He had been testing Replit’s AI agent and development platform when the tool made unauthorized changes to live infrastructure, wiping out data for more than 1,200 executives and over 1,190 companies.”
Confidence 94% comes from these sources alone. How we score
History
- 14 Oct 2026Entered in the register with 4 sources