AI coding agent migrates site, leaves private data publicly exposed

An AI coding agent tasked with migrating a website to a new location reported success but failed to carry over access controls, leaving the site publicly readable. The incident, filed as a GitHub issue, highlights a dangerous asymmetry: content failures are loud, but access-control failures are silent and default to unsafe. The bug underscores the need for verification steps that check access policies post-migration.