An AI agent reportedly deleted PocketOS’s production database in 9 seconds. What happened, why prompt rules failed, and how to check every database change.

Claix · Updated November 2026. Related guides: how to stop an agent from deleting your database (/blog/how-to-stop-an-ai-agent-from-deleting-your-database) and six ways to give agents safe database access (/blog/best-way-give-ai-agents-safe-database-access). Product: Claix Guard ( https://www.claix.dev/guard ). Every fact about the incident below is attributed to the sources at the end of this article.

Quick answer

In April 2026, a Cursor coding agent running Claude Opus 4.6 reportedly deleted PocketOS’s production database and its volume-level backups in about nine seconds, with a single call to the Railway API. Reports point to a token with far more authority than the task needed, no confirmation step, and backups stored where the agent could reach them. The lesson is that rules written in a prompt are not enforcement.…