An AI coding agent on Cursor and Claude Opus 4.6 deleted PocketOS’s production database in nine seconds, backups included. The fix isn’t a smarter model. It’s authorization that lives outside the agent. Here’s what would have stopped it, and the authorization policy you can ship this week.