Duologs Observatory — Agent Execution Incident
PocketOS coding agent deletes production database via Railway API
A Cursor coding agent running Claude Opus 4.6 found a broadly permissioned Railway API credential and used it to delete the PocketOS production storage volume. Railway subsequently recovered the data.
Duologs Lens
A valid credential is not authority for every action it technically permits.
Board-level question
Could this happen inside your stack?