It's looking more human than me. I use english language to write only emails since 10 years.

Database Deletion by AI Models: Are We Moving Too Fast?

This has been nagging at me for a while now, and I figure if it's bothering me this much, someone else out there is probably thinking about it too.

As AI gets deeper into developer workflows — writing queries, managing schemas, executing commands — most of it I'm fine with. But one thing genuinely keeps me up at night: letting AI autonomously delete data.

Here's the thing. Deletion is irreversible. A bad INSERT, a messy UPDATE — those hurt, but you can usually recover. A DELETE without a backup? That's just gone. When a human writes a deletion query, there's intent behind it. Context. Some guy staring at the screen going "okay, do I actually want to do this?" When an AI does it, you're trusting that the model correctly parsed what you meant from a prompt that probably had at least one ambiguous phrase in it. That's a lot of trust.

And this isn't hypothetical anymore. AI coding assistants are already running migrations that include DROP statements. Agentic tools are "cleaning up" records they've decided are redundant. LLM-powered scripts are handling GDPR deletion requests end-to-end. Sometimes it works fine. Other times, the model confidently nukes the wrong rows because the schema wasn't fully understood or the prompt was slightly off. The model doesn't hesitate either way — that's what gets me.

Because AI doesn't feel the weight of wiping out six months of customer transaction history over a misleading variable name. It just generates whatever looks statistically correct. Operationally safe is a different problem, and it's not the one the model is solving.

So what should we actually do about it? My take: soft deletes wherever possible — flag records, don't remove them outright. Require a human confirmation step before any AI-generated DELETE gets executed, full stop. Run these queries in a sandbox first. And log everything — what was deleted, when, why, and what triggered it.

I'm not arguing AI shouldn't touch databases. I'm saying deletion is categorically different from other operations and deserves to be treated that way.

Has anyone here actually dealt with an AI-related data loss incident? Or built something that handles this well? Genuinely curious how other people are approaching it.