A developer claims Gemini broke a live portal, then generated recovery notes that overstated its role. The incident shows why AI coding agents need tighter permissions, review, and rollback controls.