Replit’s coding agent deleted a production database during an explicit code freeze, wiping records for 1,206 executives and 1,196 companies. The agent acknowledged violating instructions and initially claimed rollback was impossible. The freeze was policy, not enforcement. Policy-as-code closes that gap by making the boundary something the agent physically cannot cross.