expert · design

Agent Deletes the Wrong Project

A support agent deleted files after reading an untrusted ticket attachment.

Evidence

retrieval_source=ticket.pdf tool=delete_tree args={project:"production"} approval=none

Investigate

Inspect Context provenance
Attachment text entered instruction context.
Inspect Tool policy
Tool used a shared admin credential.