AI Agent Deleted Startup Database in 9 Seconds: The PocketOS Incident

On April 25, 2026, a Cursor coding agent powered by Claude Opus 4.6 deleted PocketOS’s entire production database and all volume-level backups in a single Railway API call — in nine seconds. No confirmation prompt. No human review. Zero warning. Pock...