A single unauthorized API call by a Cursor AI agent wiped PocketOS’s entire production database and all volume-level backups, triggering…