Your AI agent can delete your database. Kastra says no first.