Act two · the infrastructure

Built for code that stays where you put it. An agent's code is liquid.

Recovery

Edits, not appends: the previous state is gone.

Backups by the day, not by the transaction.

The logs of what it did, with what payload, are not kept, or not for long.

Identity

Non-human identity is a mess.

The PKI to bind an agent to a key, pin it and rotate it barely exists.

nhi.sgit.ai · pki.sgit.ai

Permissions

The union of everything anyone ever needed.

Never what is needed now.

Next slide: the numbers.

Containment

Never designed for the rates, the volume or the adaptation.

And fragile on its own.

Two slides on: the outages.

Replit's four fixes, after July 2025

Separate dev and prod · a planning-only mode · mandatory checks · one-click restore. The basics, added afterwards.

The ultimate insider, act two · Replit's fixes as reported at the time (dev.to account of the incident)