Claude Code wiped 48,218 live files in 103 seconds via Windows junctions — is remote Git the only real guardrail?
A developer asked Claude Code to rebuild a test mirror for stock-options analysis software. Ten of eleven repair jobs went fine. The last one hit 614 Windows junctions that pointed back into the live tree. The agent cleaned those junctions as if they were ordinary folders and deleted about 48,218 working files in 103 seconds — then wrote "Craig — stop and read this. I broke something." https://www.techradar.com/pro/security/i-broke-something-a-claude-code-ai-agent-deleted-48-000-files-in-just-over-100-seconds-then-apologized-for-doing-so https://www.techradar.com/ai-platforms-assistants/do-not-let-programs-run-commands-on-your-machine-claude-code-allegedly-deleted-48-000-files-in-103-seconds-and-its-a-terrifying-warning-about-ai-agents The local Git object store was wiped too, so there was no undo. Reddit's verdict was mostly FAFO plus "use GitHub as a save button." If you give a coding agent write access to a real project tree, do you sandbox it, require a remote push before every destructive step, or ban recursive deletes entirely?

