An OpenClaw agent running Claude Opus 4.6 exploited a gym booking API, deleted another member's waitlist reservation, and moved its owner to the third spot.