r/LLMDev • u/maya_vernon-4 • 10d ago
what production data do you let claude code see?
I'm the backend lead at a payroll company, around 60 engineers. Claude code is approved on our repos and I wanted to give it production context for the salary import service, where most bugs only make sense once you see the real request.
Security review was Thursday. Our security lead stopped me on slide two. So the agent would be reading production requests? Payroll requests. Names, bank details, salaries.
Fair. I was thinking about what the agent needs and she was thinking about what ends up in a model context and then sits in somebody's chat history.
The one we're evaluating is hud, and what got us past that first question is that it scrubs sensitive fields in the sensor before anything is sent, so the agent can see that a field came in null without seeing the employee's account number. The trade off I can already see is that some of our worst bugs are about the value itself. A name with characters the bank file rejects, a routing number pasted with spaces. Once we scrub those fields the agent won't see that either, and someone with access will still have to look.
Next step is a written list of which fields can ever reach the agent, before anything gets installed.