Database expert Andy Pavlo on agent guardrails, vibe-coded databases and LLM tuning
InfoQ Chinese published an edited transcript of a MAD Podcast conversation between Carnegie Mellon professor Andy Pavlo, now vice president of database research at ClickHouse, and host Matt Turck on how AI agents are reshaping database work. Pavlo argues that agents wiping production databases is an old problem resurfacing — permissioning and control mechanisms have existed for decades — and recommends isolating agents with restricted permissions and branch-based sandboxes rather than approving every action by hand. He also offers rough figures: off-the-shelf text-to-SQL tools reach about 60% accuracy, LLM-based database tuning gets roughly 80-85% of the way, and more than 60% of open-source database systems now show agent-authored commits in his dbdb.io tracking.
The interview gives teams that hand production databases to AI agents concrete practices and rough figures from a leading database researcher.

每个月,X 上都会流传一个让人后背发凉的故事:某个开发者让 AI Agent 帮忙搭个东西,Agent 反手冲进数据库,把生产环境的文件删了个精光。Replit 出过这事,其他平台也出过。人们一边惊呼“AI 太危险了”,一边继续把生产库的密码交给 Agent。
但在数据库圈子里,这件事的荒谬之处在于,这些灾难本可以避免,因为防止人类干蠢事的机制,几十年前就已经存在了。
卡内基梅隆大学的 Andy Pavlo 教授,是数据库领域最接近“神”的存在之一,他的课程教会了整整一代工程师,也顺带喂饱了今天的 AI 模型。最近他以数据库研究副总裁的身份加入一家实时分析数据库公司 ClickHouse,核心产品是一个列式 OLAP(联机分析处理)数据库管理系统。
#ClickHouse#Carnegie Mellon University#Replit#Databricks#Neon#PostgreSQL#Snowflake#Claude#Codex#MySQL#Oracle