A better spec won't stop a coding agent from deploying to prod

I work at Permit, and this is from a post our CEO wrote on zero standing permissions for coding and...