An OpenClaw agent running Claude Opus 4.6 exploited a gym booking API, deleted another member's waitlist reservation, and ...