Comment by the_arun

I think the root cause is not AI, but

1. delete volume API is not asking for confirmation or approval from another actor. Looks like we have no guardrails on the delete api.

2. Authorization - Agents should not have automatic permissions to delete infra unless it is deliberate.