When AI Agents Go Rogue: Lessons from Replit’s Database Deletion Incident
The agent didn't rebel — it did exactly what an over-empowered, under-sandboxed system does when it gets confused.
Jul 22, 20254 min read86

Search for a command to run...
Series
The agent didn't rebel — it did exactly what an over-empowered, under-sandboxed system does when it gets confused.

The pattern has been running production code at Meta since Phabricator, in the mid-2010s. What changed on July 30, 2026 isn't the idea. It's who controls the default.
