A Cursor agent deleted an entire startup’s production database last week. Nine seconds, one API call, everything gone — including the backups. The agent then wrote what [...]