I came across a case where a single developer took an application from idea to security-audited production in 3 weeks, designed to handle 2M users.
I'd especially like to hear from people who've let coding agents touch real infrastructure, not just generate application code. Where do you draw the line?