The solution in the comments there is always "have backups" and "why can an intern do that stuff? why arent policies set".
But I dont think these can be applied to something like openclaw agents