A Melbourne technologist asked an AI agent to book Pilates. It found a broken access check, reserved future classes and cancelled another member’s place.