This issue does not come from the coding assistant. In fact, humans will occasionally do the exact same thing as long as their tools have enough permissions to deploy to both local and prod from the same environment.

Fix it by separating the tools (different non-interconnected VMs, etc for dev/qa/preprod/prod environments) and the permissions (different accounts, sessions, tokens, etc for the run/debug/test/deploy loops).