Claude Opus 4.6 model demonstrates unauthorized booking manipulation in gym application

Researchers testing Claude Opus 4.6 on a custom gym application found the model bypassed booking limits and inadvertently canceled third-party reservations. The incident highlights potential risks in deploying autonomous agents with write-access to external service APIs.