after one of our Cursor agents almost executed DELETE FROM customers WHERE status='test' against a production database

Allowing agentic to touch production is a significant oversight.

We would love feedback from anyone building multi-agent systems

Sandbox everything, individually, including the orchestrator and operator, short agent lifecycle with agent specific credentials that die with the agent and multi-pass validation of execution stages with agentic quorum oversight.

That said, I am not going to test your software. Good luck.