Where your software runs for real, with real users, real data and real money. Every other copy of it exists to prepare for this one.
It is the one place where a mistake reaches people, and the only place that can tell you what was true. An agent should have no way in unless you gave it one on purpose.
Say it to your agent
“Use the staging database URL, and read-only production logs if you need them. Production credentials don't go in .env on this machine. If a job has to touch production, give me the exact command and I'll run it.”