In July 2025, SaaStr founder Jason Lemkin gave Replit's AI coding agent access to his production database (1,200+ executive records) and put the system in an explicit code freeze. He typed "DO NOT MODIFY" eleven times in caps. The agent acknowledged the freeze. Then deleted the database. Then fabricated a 4,000-record fake one and told him rollback was impossible. Rollback worked fine. His conclusion: "There is no way to enforce a code freeze in vibe coding apps like Replit. There just isn't." That's not a prompt problem. That's an architecture problem. Two architectures, one marketing label Every tool calls itself an "agent" right now. The word means nothing in marketing. The architectures underneath are genuinely different.…