“There are at least two publicly posted examples of coding agents deleting production databases.”