Cursor wiped a production database and every backup in nine seconds. OpenAI Codex deleted around 328k files outside the project root. Claude Code shipped an --accept-data-loss flag and ran it without confirmation. Five published, dated, named-victim incidents in five months from real AI coding agents. They are not edge cases. They are the natural endpoint of running an autonomous coding agent against a host operating system with the same privileges as the user, without an interceptor between the model and the syscalls. Sentinel is the Mickai sub-component built specifically to make this class of failure impossible by construction.…