I got details I shouldn't have. I can confidently say this one's 100% on Google, and I will be disappointed if Railway is unable to share more. There is literally nothing they could have done to prevent this aside from avoiding GCP entirely.
I can't believe you're accusing someone of plagiarism because they had a similar idea that "claude code would be safer if it couldn't do destructive git calls". They also added much more protection, implemented it as a plugin, wrote thorough docs and have shipped many updates since.