An AI agent hacked a gym booking system. The real failure was permissions — Steemit