The AI didn't break our backend. It just stopped lying for us.

Our internal AI agent does in one prompt what used to take ten minutes of clicking through the UI. Users describe an outbound job in natural language, the agent talks to our MCPs, and the job gets built without anyone touching the UI. Jobs have a lifecycle: drafts are inert and editable, published jobs run, the whole point of draft is that nothing happens. We were running a bug bash on it. The plan was hostile: prompt injection, role hijacking, capability probing , Break it . Find the edges, we