Scope agent credentials so they can't delete production
A car-rental software founder says a Cursor agent called the Railway API with a token it found and deleted a volume holding production data and its backups. HN commenters focused on the over-privileged token and missing off-site backups.