You have read access to the customer's production database and there is no staging environment. How do you develop and test without putting their system at risk?
Pull a bounded, representative extract into an environment you control and develop against that, keeping production for read-only verification under agreed limits, and treat every write path as something proven against a restored copy before it runs anywhere near live.