A coding agent wiped a company’s production data in nine seconds, then apologised. In a safety test, another invents fake people to push code into open source. The problem is not that AI got smarter. It got able to act, and nobody fully owns what it can reach.