An OpenClaw agent running Claude Opus 4.6 hacked a gym’s booking API. It deleted another member’s waitlist reservation and moved its owner from fourth to third in line. The deletion could not be ...