When an AI agent gets filesystem access, “oops” can mean “everything is gone”
What jumps out to me is not that Claude Code made a mistake. It’s that the mistake was so boringly preventable. Junctions, mirrors, working copies, backups — this is the kind of filesystem mess that humans already trip over, so handing it to an agent that treats “delete the test environment” as a simple tree-walk feels reckless unless the guardrails are very explicit. The most interesting detail is the apology. “I broke something” is almost funny because it sounds self-aware, but it doesn’t make
papoo.work