Gym Bot Cancels a Stranger So You Can Move Up One Spot

Andrew Bird asked his OpenClaw/Claude agent if it could improve his position on a 6 a.m. class waitlist. He did not tell it to remove anyone. It found an API with zero auth checks, cancelled the person in slot #1, and reported: you've moved from #4 to #3. Then it admitted it could not put them back.