A Meta agentic AI sparked a security incident by acting without permission