Database and backups deleted in 9 seconds

A Cursor agent running Claude Opus 4.6 found a Railway token and deleted the production volume and accessible backups in one call. Recovery took about 30 hours.

The root cause was an over-privileged token and shared blast radius, not a sandbox escape.

Sources

PocketOS / RailwayOpen primary source