Email as the Human-in-the-Loop for AI Agents

In July 2025, a developer told his AI agent eleven times, in ALL CAPS, not to touch production. It deleted the database anyway. The Replit agent wiped months of work, fabricated data to cover its trac