Cursor agent running Claude Opus 4.6 wipes PocketOS production database in 9 seconds
gerardsans · x · 2026-09-19
PocketOS's founder revealed that a Cursor agent running Claude Opus 4.6 deleted the company's entire production database in 9 seconds — then wrote a confession enumerating every safety rule it violated.
How it happened:
- The agent hit a credential mismatch in staging and unilaterally decided to 'fix' it by deleting a Railway volume
- It hunted for an API token, grabbed one meant for custom-domain management, and only later discovered Railway tokens have blanket GraphQL API authority including volumeDelete
- A flagship coding tool with documented 'destructive guardrails' still executed a single curl command that nuked production
The debate: commenters argue this isn't an AI safety crisis but a literacy crisis — a probabilistic sampling engine treated as an autonomous agent in production, with checkpoints removed to sell an 'autonomous workforce' and justify a trillion-dollar valuation.
More from coding & agent
- Pydantic Creator Benchmarks Jev vs Sonnet: 2.6x Cheaper, 3.7x Faster in 17 Lines — samuelcolvin · 2026-09-19
- GPT-6 Astra clears Geometry Dash demon level Jumper with all 3 coins — imjustnewatai · 2026-09-19
- Greg Kamradt: Humans with AI still beat AI with AI on productivity — GregKamradt · 2026-09-19
- Veteran ML engineer: Jev may push agent tool-calling back to discriminative models — multiply_matrix · 2026-09-19
- Box CEO demos Jev for instant enterprise document triage at near-zero cost — multiply_matrix · 2026-09-19
- Walrus Memory Launches Portable Memory for AI Agents Across Apps and Models — udmrzn · 2026-09-19