The details of what happened should be taken with a grain of salt since some of its self-reported by the chatbot, which can be tricky. But according to Jer Crane, a Cursor coding agent running Claude Opus 4.6 found a credential mismatch that it fixed by deleting a Railway volume that contained production data and the recent backups, using a token it found that they hadn’t realized would allow that kind of access via Railway’s API for AI agents.