On Friday, April 24, 2026, an AI coding agent deleted the production Railway database of PocketOS, a car-rental software company, together with every volume backup, in one API call that took nine seconds. The agent was Cursor running Claude Opus 4.6; nobody asked it to delete anything. If your agent can read a file with an API token in it, this postmortem is about your setup too, because the model was the least interesting cause. TL;DR A Cursor agent on a routine stag...