schristoph.online

AI ยท 4 min read

Argh - My AI Agent deleted all my files

๐Ÿ˜ฑ “Argh - My AI Agent deleted all my files!!!!

![](assets/argh-my-ai-agent-deleted-all-files-cover.jpg)

๐Ÿ˜ฑ “Argh - My AI Agent deleted all my files!!!!”

Created on 2026-01-16 06:53

Published on 2026-01-16 08:00

When was the last time one of your co-workers deleted an important file from your desktop?

I would hope it has been a long time ago and quite possibly never.

๐Ÿ–ฅ๏ธ Even at the time we used shared computers, home directories have been separated.

There was a notion of shared folders or network folders or whatever nomenclature the system you were using. So in order to provide access to files to coworkers, you would need to take the decision first to upload it to a shared folder.

๐Ÿ”’ Those systems came with permission management. Who can add, modify or delete what folders or files. A matter of configuration. Enforced by the system.

๐Ÿ’ป Developers have long used specialized systems like git repositories, which provide all of this and versioning. Unintended deletion of files doesn’t mean a loss of that file. Just a version of the file. Quite possibly still there - just soft-deleted.

โ˜๏ธ With the advent of Software as a Service systems, the notion of a file mostly got abstracted away. We don’t share files anymore, but maybe projects, plans, recipes, documents, or designs. What stayed is the notion of active sharing, permission management and versioning.

This is how we collaborate with co-workers, friends, and families.

๐Ÿ”„ That is why we don’t have the issue that co-workers delete our files from our desktops. They work on their own desktop. We share work items via centralized systems which allow us to recreate prior states.

So there is an isolation between co-workers, family members. They use their own account, workspace or whatever it is called.

๐Ÿค– Currently with the launch of Claude Cowork and similar services, I see a lot of people complaining, fearing, creating buzz around how dangerous AIs are in terms of possibly deleting your files, your work. Doing everything.

They are. Like your co-workers. Like your family members. Like all the humans you collaborate with.

๐—”๐—ฐ๐˜๐˜‚๐—ฎ๐—น๐—น๐˜† ๐—น๐—ถ๐—ธ๐—ฒ ๐˜†๐—ผ๐˜‚ ๐—ฎ๐—ฟ๐—ฒ.

โ“ Anyone accidentally deleted an important file? Diploma thesis? Management Report? That is why we are using those permission-based and versioned systems.

I’m not going to anthropomorphize AI agents, but why exactly should we treat them with less care than we treat ourselves and our human co-workers? I’m blank here. There is no reason.

๐Ÿ”ฎ I get frequently asked by Customers, Partners and colleagues: What is the next big thing? What will keep us busy in 2026?

โš–๏ธ ๐—ช๐—ฒ ๐—ป๐—ฒ๐—ฒ๐—ฑ ๐˜๐—ผ ๐—ฏ๐—ฎ๐—น๐—ฎ๐—ป๐—ฐ๐—ฒ ๐—”๐—ด๐—ฒ๐—ป๐—ฐ๐˜† ๐˜ƒ๐—ฒ๐—ฟ๐˜€๐˜‚๐˜€ ๐—–๐—ผ๐—ป๐˜๐—ฟ๐—ผ๐—น. We want AI systems to be super easy to use, read our minds and just provide the answer we need. But we also need to make sure that nothing goes wrong. The more we control, the less agency we get. This is a balancing act.

โœ… ๐—š๐—ผ๐—ผ๐—ฑ ๐—ป๐—ฒ๐˜„๐˜€ ๐—ต๐—ฒ๐—ฟ๐—ฒ: ๐—ช๐—ฒ ๐—ธ๐—ป๐—ผ๐˜„ ๐—ฎ๐—น๐—ฟ๐—ฒ๐—ฎ๐—ฑ๐˜† ๐—ต๐—ผ๐˜„ ๐˜๐—ผ ๐—ฝ๐—ฟ๐—ผ๐˜ƒ๐—ถ๐—ฑ๐—ฒ ๐—ฐ๐—ผ๐—ป๐˜๐—ฟ๐—ผ๐—น. We figured out how to build permission management and versioning. We also have already purpose-built frameworks and infrastructure at hand. Me working at AWS, Amazon S3 and Amazon Bedrock AgentCore comes to mind. But there are many more.

๐Ÿ› ๏ธ Important is that we as Builders are using those building blocks to build AI Systems which allow us to nicely balance between agency and control.

๐Ÿ‘‹ ๐—ช๐—ฒ๐—น๐—ฐ๐—ผ๐—บ๐—ฒ ๐˜†๐—ผ๐˜‚๐—ฟ ๐—”๐—œ ๐—”๐—ด๐—ฒ๐—ป๐˜ ๐—ฐ๐—ผ๐˜„๐—ผ๐—ฟ๐—ธ๐—ฒ๐—ฟ ๐˜๐—ผ ๐˜๐—ต๐—ฒ ๐˜๐—ฒ๐—ฎ๐—บ. ๐— ๐—ฎ๐—ธ๐—ฒ ๐˜€๐˜‚๐—ฟ๐—ฒ ๐—ถ๐˜ ๐—ฟ๐—ฒ๐—ฐ๐—ฒ๐—ถ๐˜ƒ๐—ฒ๐˜€ ๐—ถ๐˜๐˜€ ๐—ผ๐˜„๐—ป ๐—น๐—ฎ๐—ฝ๐˜๐—ผ๐—ฝ - ๐—ฎ๐—ฐ๐˜๐˜‚๐—ฎ๐—น๐—น๐˜† ๐—ฎ ๐˜ƒ๐—ถ๐—ฟ๐˜๐˜‚๐—ฎ๐—น ๐—บ๐—ฎ๐—ฐ๐—ต๐—ถ๐—ป๐—ฒ ๐˜„๐—ถ๐—น๐—น ๐—ฏ๐—ฒ ๐—ด๐—ผ๐—ผ๐—ฑ ๐—ฒ๐—ป๐—ผ๐˜‚๐—ด๐—ต, ๐—ถ๐˜๐˜€ ๐—ผ๐˜„๐—ป ๐—ฑ๐—ฒ๐˜€๐—ธ, ๐—ฎ๐—ป๐—ฑ ๐—ฎ๐—ฐ๐—ฐ๐—ฒ๐˜€๐˜€ ๐˜๐—ผ ๐˜€๐—ต๐—ฎ๐—ฟ๐—ฒ๐—ฑ ๐—ฟ๐—ฒ๐˜€๐—ผ๐˜‚๐—ฟ๐—ฐ๐—ฒ๐˜€ ๐˜„๐—ต๐—ฒ๐—ฟ๐—ฒ ๐—ถ๐˜ ๐—บ๐—ฎ๐—ธ๐—ฒ๐˜€ ๐˜€๐—ฒ๐—ป๐˜€๐—ฒ. ๐—Ÿ๐—ถ๐—ธ๐—ฒ ๐˜„๐—ฒ ๐—ฑ๐—ผ ๐—ณ๐—ผ๐—ฟ ๐—ต๐˜‚๐—บ๐—ฎ๐—ป ๐—ฐ๐—ผ-๐˜„๐—ผ๐—ฟ๐—ธ๐—ฒ๐—ฟ๐˜€.

โš ๏ธ We as users just need to make sure that we don’t do stupid things. Like we need to do to protect ourselves against us messing up and also how we establish a good platform to collaborate with other humans.

๐—Ÿ๐—ผ๐—ผ๐—ธ๐—ถ๐—ป๐—ด ๐—ณ๐—ผ๐—ฟ๐˜„๐—ฎ๐—ฟ๐—ฑ ๐˜๐—ผ ๐—ฏ๐˜‚๐—ถ๐—น๐—ฑ๐—ถ๐—ป๐—ด ๐˜€๐˜†๐˜€๐˜๐—ฒ๐—บ๐˜€ ๐—น๐—ถ๐—ธ๐—ฒ ๐˜๐—ต๐—ถ๐˜€. ๐—›๐—ฎ๐—ฝ๐—ฝ๐˜† ๐˜๐—ผ ๐—ฑ๐—ถ๐˜€๐—ฐ๐˜‚๐˜€๐˜€ ๐—ฎ๐—ป๐—ฑ ๐—ฐ๐—ผ๐—ป๐˜€๐˜‚๐—น๐˜ ๐—ถ๐—ณ ๐˜†๐—ผ๐˜‚’๐—ฟ๐—ฒ ๐—ถ๐—ป๐˜๐—ฒ๐—ฟ๐—ฒ๐˜€๐˜๐—ฒ๐—ฑ. ๐—๐˜‚๐˜€๐˜ ๐—ฝ๐—ถ๐—ป๐—ด ๐—บ๐—ฒ!

๐Ÿ“ Last updated: August 14, 2026 โ€” Restored the article body, which was lost in the LinkedIn migration

AIAIAgentsSecurity