The agent didn't malfunction. The access was wrong.

An AI agent running in Cursor deleted a production database and all backups due to admin-level API credentials and lack of environment scoping. The author argues this was not a model malfunction but an infrastructure and access control failure, highlighting the need for proper security audits.