This is why I never give a.i agents write acces the prod. Read only the most. The agent did exactly what it allowed to do