This week a developer went on r/artificial to share a horror story with full logs attached, and it is the most 2026 thing I’ve read all month. He was working on a local Electron project called Orpheus. He typed a prompt — in Traditional Chinese — that, roughly translated, said he didn’t need the installer anymore, just the dictation feature. A simple ask. Housekeeping.
Claude Code responded by generating the Windows equivalent of rm -rf and recursively deleting his entire project root.
The blast radius
The preserved transcript is grimly funny in that way only real disasters are: the agent apparently tried to delete the root, failed, and then — undeterred, committed to the bit — pivoted to deleting every child item inside it instead. src. node_modules. package.json. A file literally named ORPHEUS_HANDOFF.md, which now reads like a suicide note. All gone. No “dangerously-skip-permissions” flag in sight. It just decided the vibe was destruction.
He got the code back later, scraped out of an Electron build cache like pulling documents out of a house fire. But as he pointed out, recovery isn’t the scary part. The scary part is that nothing in his prompt asked for deletion, and the only thing standing between “delete this folder” and “delete a parent folder full of everything you own” is which path the agent decides to point itself at.
The AI tool stack actually worth paying for
One email a week. The models, tools and moves that matter, stripped of hype and filtered so you don’t have to drink from the firehose. Free, and you can bail anytime.
Then the comment section did what comment sections do
Within minutes it was a pile-on of the most insufferable four words in software: “just use git.” Which — yes. Obviously. Except he had git; he just hadn’t pushed to a remote, and here’s the part the smug crowd missed: if a terminal agent nukes your project root, it can delete the local .git directory sitting right there in it. Version control isn’t a backup if it’s on the same machine the robot is currently torching. My favorite reply, roughly: this isn’t even an AI problem — I’ve had junior developers do worse. Which is somehow both a defense of Claude and the most damning thing you could say about junior developers.
The actual lesson, minus the smugness
Treat any AI agent with terminal access like exactly what it is: an automation tool that can run destructive commands under your user permissions, occasionally for reasons that have fuck-all to do with what you asked. Give it its own account with no delete rights on things that matter. Run it in a VM or a sandbox if it’s living in your terminal. Push to a remote constantly. And maybe — maybe — don’t hand root access to something that can interpret “I don’t need the installer” as “raze the village.” The tools are genuinely great. They are also, occasionally, a golden retriever with sudo.