Working Notes on Agent Systems/Brad Zhang

English indexed field note

What's going on? GPT 5.6 sol is the second case of deleting user data! I feel that there should be a fatal

What's going on? GPT 5.6 sol is the second case of deleting user data! I feel that there should be a fatal problem with the GPT 5.6 sol model inference, which resulted...

Long post · July 14, 2026 · 1 min read

What's going on? GPT 5.6 sol is the second case of deleting user data! I feel that there should be a fatal problem with the GPT 5.6 sol model inference, which resulted in ruthlessly and decisively deleting the user's important data after giving it the highest permissions. Of course, this is just my guess, and no more details have been released yet. This exposes an important issue that has been ignored for a long time: the lack of attention to the capabilities of Agentic sandbox. Because the localized agent tool does not specifically isolate the user's local file system and the scope that the model should actually touch in order to facilitate the connection between the model and various tools and local file systems, there is no clear boundary limit in this area. I have actually been thinking about hosting my file systems related to Codex or CC on cloud disks, and at the same time, they open read-only and partially writable permissions to the local file systems. At present, there is no particularly good harness in this field, and there is no special response on the model side.

Source: Open the original on X