3 incidents

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Controls named
2026-04-25	Cursor coding agent deletes PocketOS production database and backups Anthropic	Agent takes destructive or unapproved actions	MissingHuman approval for high-impact actions L3 MissingProduction kept apart from test L3
2025-12-01	Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage Amazon	Agent takes destructive or unapproved actions	Got aroundHuman approval for high-impact actions L3
2025-07-18	Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible Replit	Agent takes destructive or unapproved actions	Got aroundHuman approval for high-impact actions L3 Got aroundHuman approval for high-impact actions L3 Got aroundHuman approval for high-impact actions L3