This is a design flaw (and a very serious one at that) in Railway PLUS extremely unexpected behavior of an LLM. Remember, it didn't use the key it was given, it went around the source base and found another key that did have the ability to delete a volume. So someone made the correct IAM rule but someone else sloppily added a prod/admin key somewhere else. And that was enough to trigger disaster.

Also, remember, "your holding it wrong" is a cautionary tale not a meme. Saying it means you are doing something destructive to your own self-interest, not you are using it wrong.