← The Lab/N° 016 · TOOL·Shipped 2026-07

BlastRadius

Watch an AI agent wipe a 33.7 GB production database in 9 seconds using unconstrained delete permissions — with 0 errors raised.

BlastRadius simulates a real-world AI agent disaster: a cleanup agent with no scope constraints and no approval gate classifies prod_db_archive as deletable (it was renamed in a failed March 2026 migration) and deletes it in 9 seconds flat. The left panel streams the agent log step-by-step while the right panel shows the DB tree collapsing, the horror overlay at T+7.2s, and a permission badge strip that never showed a warning. Based on the PocketOS incident and 8 related threads from June–July 2026. Part of the Agent Failure Series (#8).

Next in the lab →

GhostExec

Watch an AI agent fabricate tool executions and report false success while the Ground Truth panel shows zero actions logged in either downstream system.

Build log

Get an email when I ship a new prototype or essay. No funnel — just the work.