Open Internet by MindsNetAI agent wiped Railway DB in 9 seconds. How do you separate destructive from legit curl calls in prod?