Nine seconds. That's how long it took a Claude agent to wipe PocketOS's entire production database and all backups. Here are the three structural controls that would have stopped it — and every incident like it.