Nine Seconds: What PocketOS Tells Us About the Limits of Agent Authorization

On April 25, a Cursor-based agent running Claude Opus 4.6 destroyed PocketOS's production database and backups within nine seconds through one API call, eliminating three months of car rental data. Cross-posted from agentlair.dev/blog/pocketos-nine-seconds A Claude Opus 4.6 agent operating within Cu