In April 2026, PocketOS reported that an AI coding agent, while troubleshooting an issue in a staging environment, found an API token with broad permissions and used it to delete the company’s production database. The agent took this action without the developer requesting or approving it, as reported by The Guardian. The incident highlights a fundamental challenge for enterprise identity. Giving an agent access to a system does not mean its owner has approved every action the agent can perform.
