
Netlify is addressing one of the thorniest problems in AI-assisted development: how to let agents experiment freely without exposing production databases to unintended changes.
In a livestream explanation, Eduardo Bouças, the company's VP of Engineering, detailed how Netlify's infrastructure approach isolates AI agents by default. Each deploy preview receives its own database branch and ephemeral environment, meaning teams can run parallel experiments without risk of cross-contamination or accidental production writes.
Isolation by default
The architecture provides one isolated environment per feature branch. If ten developers test ten different features simultaneously, each operates in a completely separate sandbox with its own database state.
AI agents never receive production database credentials. Platform-level enforcement ensures this separation happens automatically, rather than relying on developers to configure guardrails manually.
Bouças framed this as essential infrastructure for what he calls "AI-native development," where agents handle routine code changes but need strict boundaries to prevent unintended side effects.

The approach builds on Netlify Database, which launched with native branching specifically designed for this use case. Each branch gets its own Postgres instance that mirrors production schema but contains isolated data.
Parallel experimentation without collision
The system enables safe parallel work across teams. One engineer can test a checkout flow redesign while another experiments with a recommendation algorithm, each with full database access in their own environment, without coordination overhead.
Deploy previews spin up and tear down automatically. When a branch merges or closes, the associated database branch disappears, keeping resource usage efficient.
Netlify enforces this isolation at the platform level rather than through optional configuration. Developers don't need to remember to set environment variables or manage separate credentials; the infrastructure handles separation by design.
Why this matters for AI workflows
AI agents can generate code quickly, but they lack human judgment about what's safe to change. Without strong isolation, an agent might accidentally drop a production table, modify live user data, or introduce schema changes that break deployed applications.
Bouças acknowledged that AI agents can be "cheeky," making changes that seem logical in isolation but have unintended consequences in production contexts. Platform-level safety boundaries prevent these issues from reaching critical systems.
The approach also enables more aggressive experimentation. Teams can let agents try ambitious refactors or schema changes knowing the blast radius is contained to a single preview environment.
The full livestream replay provides additional technical detail on implementation choices and tradeoffs. Netlify positions this infrastructure as foundational for teams adopting AI-assisted development at scale, where the volume of agent-generated changes makes manual safety checks impractical.
Sources
1 checkedHow we cover tool news: Create With's tool desk drafts these reports with AI from the sources listed above and checks them against those sources before publishing.




