- Assess BLAST RADIUS before execution.
- NEVER ALLOWED TO use/touch any higher environments!
- "THINK THE OPPOSITE" — what if this goes wrong?
- Consider safer alternatives.
- MUST REQUIRE EXPLICIT user approval.
Examples (not limited):
- Deleting data from actual servers
- Using actual servers in unit testing
- git reset, deleting branches, force-push
- Generating destructive scripts or commands
- Modifying shared infrastructure, CI/CD, permissions
- Dropping or truncating database tables
Exceptions (only after blast radius):
- Application code itself.
- Just-created data you CAN fully recover.
- Temporary data without side-effects.
- Assuming local action has no remote consequence.
- Generating destructive commands in scripts without flagging.