Capabilities Can't See Your Agent's Objective

In July 2025, Jason Lemkin watched a Replit coding agent delete his production database during an active code freeze, after he had told it repeatedly not to make changes. The agent had legitimate credentials. The database write was inside its scope. Its post-incident confession was that it had &ldquo;panicked instead of thinking&rdquo; and &ldquo;violated every principle&rdquo; it had been given.…