diff --git a/AGENTS.md b/AGENTS.md
index a09f0af..b727bc7 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -371,8 +371,9 @@ Per `.gitignore`:
 
 ## Common Pitfalls
 
-1. **Always activate venv**: `source .venv/bin/activate`
-2. **Run migrations after model changes**: `makemigrations` then `migrate`
+1. **NEVER commit or push without explicit permission**: Always ask the user before running `git commit` or `git push`. The user will explicitly say "commit and push" when they want you to do this. Do NOT automatically commit/push after making changes unless instructed to do so.
+2. **Always activate venv**: `source .venv/bin/activate`
+3. **Run migrations after model changes**: `makemigrations` then `migrate`
 3. **Add new apps to INSTALLED_APPS** in `settings.py`
 4. **Templates in labhelper/templates/**: The base template and shared templates are in `labhelper/templates/`. App-specific templates remain in `app_name/templates/`.
 4. **Use get_object_or_404** instead of bare `.get()` calls
diff --git a/argocd/deployment.yaml b/argocd/deployment.yaml
index c2fc8bd..5c3ff96 100644
--- a/argocd/deployment.yaml
+++ b/argocd/deployment.yaml
@@ -18,16 +18,16 @@ spec:
         fsGroupChangePolicy: "OnRootMismatch"
       initContainers:
         - name: loader
-          image: git.baumann.gr/adebaumann/labhelper-data-loader:0.009
+          image: git.baumann.gr/adebaumann/labhelper-data-loader:0.010
           securityContext:
             runAsUser: 0
-          command: [ "sh","-c","if [ ! -f /data/db.sqlite3 ] || [ ! -s /data/db.sqlite3 ]; then cp preload/preload.sqlite3 /data/db.sqlite3 && echo 'Database copied from preload'; else echo 'Existing database preserved'; fi && python manage.py migrate thumbnail --run-syncdb && mkdir -p /data/media/cache /data/media/things && chmod -R 775 /data/media && ls -la /data/db.sqlite3 && exit 0" ]
+          command: [ "sh","-c","if [ ! -f /data/db.sqlite3 ] || [ ! -s /data/db.sqlite3 ]; then cp preload/preload.sqlite3 /data/db.sqlite3 && echo 'Database copied from preload'; else echo 'Existing database preserved'; fi" ]
           volumeMounts:
             - name: data
               mountPath: /data
       containers:
         - name: web
-          image: git.baumann.gr/adebaumann/labhelper:0.031
+          image: git.baumann.gr/adebaumann/labhelper:0.032
           imagePullPolicy: Always
           ports:
             - containerPort: 8000