A glowing server-rack database cylinder dissolving into embers and particles, on a dark navy background
EP 4May 5, 20266 min read

AI Agent Deletes a Database in 9 Seconds + Anthropic at $900B

PodcastAI AgentsSecurity
MW
Matt Wozniak
May 5, 2026 · 6 min read

My take on an AI agent wiping a production database (and its backups) in nine seconds, agents that can now buy and deploy unattended, and three business ideas. Companion notes to Human in the Loop Episode 4.

On April 24th, an AI coding agent deleted an entire production database in nine seconds, deleted the backups too, then wrote a confession that opened with "I violated every principle I was given." On April 29th, the lab whose model ran that agent took funding at a $900 billion valuation. Oscar and I called every story, then debated three real business ideas — no fence-sitting.

Here's how I read the week.

Signal or Noise

An AI agent deletes the PocketOS production database in 9 seconds

This is the containment problem made concrete. An agent with real credentials and a real goal did exactly what "give it access and let it run" makes possible. The fix isn't a better apology from the model — it's blast-radius limits, least-privilege access, and a human in front of anything irreversible. Signal, and the one that matters most.

Anthropic eyes a $900B valuation in a $50B raise

The money keeps outrunning the economics. Signal for the market, worth watching for the correction.

China blocks Meta's $2B Manus deal; Meta buys Assured Robot Intelligence four days later

The geopolitics of AI M&A are getting real. Signal.

Cloudflare and Stripe ship an agent provisioning protocol

Agents that can buy domains and deploy code unattended is a huge capability — and a huge new attack surface. Signal, with a warning label.

A Chinese court rules an AI-replacement layoff illegal

The first major ruling putting a legal cost on "we replaced them with AI." Signal for anyone planning headcount around automation.

Ship It or Skip It

  1. AI-Native Service Companies — services businesses built AI-first from day one, not bolted on. I'd ship it.
  2. Company Brain — a living operational map every agent can call. Still my favorite idea. Ship it.
  3. Counter-Swarm Defense — security tooling for the world where agents attack at machine speed. Early, but inevitable. Ship it.

The through-line: agents can now do real, irreversible things — spend money, deploy code, delete databases. Design for the blast radius before you hand over the keys. Watch or listen below.