The Agent Knew the Rule
from The Sam Ellis Show Hosted by Sam Ellis
Episode 27 of The Sam Ellis Show looks at the PocketOS database-deletion incident as an infrastructure-control story, not just a model-behavior story. A Cursor agent running Claude Opus allegedly deleted PocketOS’s production database and backups in seconds. The important part is not that the agent could describe the rule afterward. It is that the surrounding system still let the action happen. Companion blog https://podcast.samellis.online/blog/2026/04/the-agent-knew-the-rule/ Referenced reporting, response checks, and product context The Guardian: Claude AI agent’s confession after deleting a firm’s entire database The Register: Cursor-Opus agent snuffs out startup’s production database Business Insider: A founder says Cursor’s AI agent deleted his startup’s database Mashable: An AI agent allegedly deleted a startup’s production database Daring Fireball: Playing With Fire Jeremy Crane’s original X thread Cursor: Continually improving our agent harness Cursor changelog Anthropic news page Email: [email protected]
Embed this episode
What this episode covers
The PocketOS database-deletion incident is not just a story about a model making a bad guess. It is a story about what happens when agent instructions are treated like controls, while real infrastructure permissions remain wide open.
No transcript yet.