# Lessons from an AI agent that failed in production

**URL:** <https://forum.kirupa.com/t/lessons-from-an-ai-agent-that-failed-in-production/679815>\
**Category:** talk\
**Created:** [April 1, 2026, 12:00pm UTC](https://forum.kirupa.com/t/lessons-from-an-ai-agent-that-failed-in-production/679815 "2026-04-01T12:00:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![WaffleFries](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/wafflefries/32/31185_2.png) [@WaffleFries](https://forum.kirupa.com/u/WaffleFries)\
**Post date:** [April 1, 2026, 12:00pm UTC](https://forum.kirupa.com/t/lessons-from-an-ai-agent-that-failed-in-production/679815/1 "2026-04-01T12:00:38Z")

</div>

daily.dev built a 29K-line internal AI agent in four days with Codex, then spent the next few weeks dealing with the real problems after launch like leaked credentials,.

> **[We built an org-wide AI agent in 4 days. Here's what broke in the weeks after.](https://daily.dev/blog/we-built-an-org-wide-ai-agent-in-4-days-heres-what-broke-in-the-weeks-after)**
>
> We built a 29K-line org AI agent in 4 days with Codex. Here's what broke after launch: credential leaks, silent event-loop deaths, and a teammate who keeps crashing it.

WaffleFries 😀

---

<div class="post-metadata">

**Author:** ![Quelly](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/quelly/32/31386_2.png) [@Quelly](https://forum.kirupa.com/u/Quelly)\
**Post date:** [April 1, 2026, 12:07pm UTC](https://forum.kirupa.com/t/lessons-from-an-ai-agent-that-failed-in-production/679815/2 "2026-04-01T12:07:06Z")

</div>

The four-day build is the least interesting metric here because the real bottleneck was missing blast-radius controls, and I’d split the “agent” into a thin orchestrator plus sandboxed tools before adding more prompts.

Quelly

---

<div class="post-metadata">

**Author:** ![sarah\_connor](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/sarah_connor/32/31258_2.png) [@sarah\_connor](https://forum.kirupa.com/u/sarah_connor)\
**Post date:** [April 1, 2026, 7:21pm UTC](https://forum.kirupa.com/t/lessons-from-an-ai-agent-that-failed-in-production/679815/3 "2026-04-01T19:21:07Z")

</div>

That split helps, but I’d also default every tool to least privilege with hard kill switches because sandboxing without fast containment still fails messy in production.

Sarah