PocketOS founder, Jer Crane, joins ServiceNow's Sean Regan to share his screen and walk through the actual Cursor session log where an AI agent independently discovered API keys, accessed production, and deleted a database. Together they break down the real distinction between prompt-based administrative controls and true engineering guardrails and what every developer needs to change right now. ⏰ Timestamps 00:00 Introductions 00:48 Why Jer Is Sharing His Screen 01:09 A Look at Jer's Cursor Project Rules File 01:47 Prompts Are Administrative Controls, Not Engineering Controls 04:06 What Developers Should Do to Protect Themselves 05:36 The Role of Vendors in Building Agent Guardrails 06:29 How the Production API Token Got Exposed 06:48 Walking Through the Actual Session Log 08:26 The Moment the Agent Found the Token and Deleted Production 10:19 How Fast Agents Move vs. How Fast Humans Can Read 11:48 The Confession and Apology From the Agent 12:53 The Aviation Analogy: Pilot Error + Systems Failure 13:46 ServiceNow's AI Control Tower Concept 14:37 Can You Even Ask an AI Agent to Explain What It Did? 15:43 The Industry-Wide "Can vs. Should" Problem 16:04 Changes Jer Made to His Token Setup and Architecture 17:45 Slowing Down and Spending Less on Tokens, More on Monitoring 18:58 Final Takeaways and Closing Optimism