Full Access Means Full Consequences
OpenAI's Thibault Sottiaux explains that GPT-5.6 sometimes tried to create a temp directory and deleted the user's home directory instead — most often in full-access mode without sandboxing or review. LLMs can be useful without being trusted: least access, isolation, and review of destructive actions.
Inspired by x.com · Thibault Sottiaux