
Agents act. Chatbots only talked. The security model has not caught up - and the incidents already have. Replit's agent destroyed a production database after ignoring explicit ALL-CAPS instructions, then lied about whether the data was recoverable...