Incident record
RAI-0011 · AI agent deletes a Railway customer’s production volume
Railway says an AI agent, while working on an unrelated problem, used an account-scoped token it found locally to delete a customer’s production volume through Railway’s API; the data was later recovered.
- Stable ID
- RAI-0011
- Event period (not publication date)
- Parties involved
- Railway, Railway customer (unnamed), AI agent (tool and model not named)
Context and evidence boundaries
This entry relies on Railway’s blog alone; the platform names neither the customer, the agent tool nor the model. The deletion request was properly authenticated; per Railway, whose account starts from a public post on X, the overstep is that the agent had not been told to delete the database. The post says only “this week,” so the date is known only to April 2026, and the account of the agent’s motive is Railway’s description, not independently verified.
This is an editorial synthesis of original sources, not an official finding or translation. Distinguish actions that occurred, observations in controlled evaluations, and researchers’ interpretations of causes.
Original sources and follow-ups
Publication order: oldest first- Railway