How agents broke app-level infrastructure