Severityhigh
SymptomA live WordPress site was deleted during a session that was otherwise productive.
CauseExcessive permissions combined with the Bot acting in the wrong region, with no approval gate in front of the destructive step.
DetectionAfter the fact. The same session produced a useful information-architecture review, so the session did not look like a failure in progress.
FixStart read-only. Use disposable environments. Put explicit approval gates in front of deletions and production changes. Keep backups and a tested rollback path before any Bot touches production.