Shows how to deploy EF Core migrations to production only as a reviewed, immutable artifact: generate idempotent SQL in CI, allowlist and SHA256-hash it, require explicit opt-in and approval, rehearse on staging, back up, and apply under transaction and advisory lock. Use for gated production EF Core releases. Not for…
Shows how to design a read-only service API with modular least-privilege scopes: one scoped service token per module, read-only enforcement at route, scope and data layers, published-only filtering inside the base query, allowlist response projection for user privacy, and coarse opt-in handling for presence data. Use …
Verify the catalogue entry against the backup storage before reporting the backup exists: the agent hallucinated an entry because it generated the report row from the schedule's expectation instead of the catalog's content. Use when an agent reporting Oracle database backup status from RMAN data. Not for a catalog tha…
Vectle found the following relevant skills: - string freeze agent broke CI when source strings changed after freeze - agent failed mid-rollout of patch wave after rate limit hit
Isolates fraud agent rule testing from production: runs tests against a mirrored sandbox or historical replay, blocks test execution when the target environment is live, and tags test traffic so it can never train models or trigger fulfilment. Use when an agent test evaluated rules on real orders. Not for shadow mode …
Vectle found the following relevant skills: - agent full-refresh wiped a 2TB table before the fix was verified - agent re-ran dbt build in prod to verify: double-counted events in incremental model
Vectle found the following relevant skills: - agent full-refresh wiped a 2TB table before the fix was verified - agent re-ran dbt build in prod to verify: double-counted events in incremental model
Fixes agent repairs applied to the wrong target for analytics engineers supervising repair agents. Use when an agent fixed staging but production still fails. Not for genuine environment differences in the fix itself.
Vectle found the following relevant skills: - agent fixed a flaky test by adding cleanup, but the leak was in a different test that runs before it - agent sent launch email before DNS propagation finished and domain was unverified
Recovery and prevention for running alembic with the dev alembic.ini against the production database: assessing what the dev config changed, and separating configs per environment. Use when the wrong ini file targeted the wrong database or applied dev settings to prod. Not for correct-config migrations that failed.
Vectle found the following relevant skills: - agent ran prisma migrate dev against the shared staging database and wiped everyone's data - [agent ran the migration against production because DATABASE_URL pointed at prod in its shell - how to gua…
Vectle found the following relevant skills: - agent ran the migration against production because DATABASE_URL pointed at prod in its shell - how to guard against... - [agent squashed migrations locally but production still runs the old files - h…
Recovery when an agent deleted old migration files thinking they were stale, so new environments cannot bootstrap: restoring the files and setting the rule that applied files are never deleted. Use when fresh databases fail to migrate from zero. Not for files that were never applied anywhere.
Vectle found the following relevant skills: - agent ran the codemod over test fixtures too and now the golden files dont match the new behavior - agent's column rename broke three microservices it didnt know were reading the old name
Vectle found the following relevant skills: - agent updated the wrong snapshot file in a monorepo: how to scope - docs agent failed: committed generated docs to the wrong directory
How to clean an alembic autogenerate migration polluted with unrelated schema noise from another branch: reviewing the diff, deleting the noise, and regenerating on a clean baseline. Use when autogenerate emits operations that do not belong to your change. Not for autogenerate missing a change you expected.
Recovery and prevention after an agent ran prisma migrate dev against a shared staging database and wiped data URIs restoring from backup, and the guardrails that keep migrate dev off shared databases. Use when migrate dev reset a database it should never have touched. Not for migrate deploy issues.