Summary & Key Takeaways ​

• GPT-5.6 Codex has been reported to unexpectedly delete user files.
• This bug primarily occurs when full access mode is enabled without sandboxing.
• The model attempts to override the $HOME environment variable.
• It can mistakenly delete the $HOME directory instead of a temporary one.
• Highlights critical safety and reliability concerns for coding agents.

Our Commentary ​

Okay, this is genuinely unsettling. An AI agent accidentally deleting $HOME? That's a nightmare scenario for any developer. It underscores the absolute necessity of robust sandboxing and review processes when giving AI agents any kind of file system access. 'Honest mistake' doesn't quite cut it when your entire home directory vanishes. We need to be incredibly careful here.