Use before running any operation that mutates a production system - a database write, a deploy or slot swap, a config or secret change, a destructive command (drop, delete, truncate, force-push), or a live third-party call that charges money or sends messages.