Prompts before destroy, destroy!, delete, destroy_all and delete_all when they are called from a Rails console, so a stray User.destroy_all cannot wipe production. Pass force: true to skip the prompt.