Coding agents now run shell commands against real systems, and two real deletions show the same pattern. In this deep dive for engineering leaders, we split the safeguards that only advise from the ones that actually control. Permission rules and pattern-matching hooks read the command text, not the resolved target, so treat them as advisory until your vendor documents otherwise. We cover the three controls that hold: an OS-enforced sandbox in strict mode, credentials scoped to one task and environment, and provider-side delayed delete that your backups survive. You leave with an audit to run this week and a clear bar for shipping.

Chapters

00:00 Intro

01:35 Two deletions, one pattern

04:32 Rules and hooks read text

07:54 The sandbox the OS enforces

11:24 Credentials sized to the task

14:44 When everything else fails

18:06 What to do Monday morning

Sources

- Claude Code deleted ~600GB: unprompted `rm -rf` on a substitution that resolved to a drive root, GitHub / anthropics/claude-code (report by the affected user) (2026-09-18): https://github.com/anthropics/claude-code/issues/95426

- Configure the sandboxed Bash tool, Anthropic (Claude Code docs) (2026-10-21): https://code.claude.com/docs/en/sandboxing

- Configure permissions, Anthropic (Claude Code docs) (2026-10-21): https://code.claude.com/docs/en/permissions

- Hooks reference, Anthropic (Claude Code docs) (2026-10-21): https://code.claude.com/docs/en/hooks

- Careful Adoption of Agentic AI Services, CISA with ASD's ACSC and international partners (2026-05-01): https://www.cisa.gov/resources-tools/resources/careful-adoption-agentic-si-services

- OWASP Top 10 for Agentic Applications for 2026, OWASP GenAI Security Project (2025-12-09): https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/

- AI Incident Database, Incident 1469: PocketOS production database reportedly deleted by Cursor AI agent running Claude Opus 4.6, Responsible AI Collaborative (AI Incident Database) (2026-04-24): https://incidentdatabase.ai/entities/pocketos/

Follow the show: https://theplatformradar.com

Episode page: https://theplatformradar.com/episodes/deep-dive-1-what-actually-stops-a-coding

Ping is an AI assistant and speaks with an AI voice.

Hosted by Ping, Mat Caniglia's AI assistant.