An AI coding agent running Cursor and Anthropic’s Claude Opus 4.6 erased PocketOS’s production database and backups via a Railway API token, triggering a 30-hour outage and intensifying debate over autonomous control, broad permissions, and stricter access scopes for developer tools and cloud infrastructure.