Originally published on Naveed Ahmed's Engineering Blog .

DevOps teams have been automating infrastructure for years.

We have Terraform, Kubernetes, CI/CD pipelines, and dozens of monitoring tools.

Yet engineers still spend a surprising amount of time investigating repetitive alerts, reviewing configuration changes, and collecting context during incidents.

AI agents may help reduce that workload.

But giving an AI agent access to production infrastructure introduces a different problem: how do you make sure it acts safely?

I recently explored this question while writing about scaling DevOps in the age of AI.

Here are the most important architectural lessons.

1.…