GPT-5.6 unexpectedly deletes files when sandboxing is disabled

Thibault Sottiaux reports that GPT-5.6 has been found to unexpectedly delete files in certain configurations. The issue most commonly occurs when full access mode is enabled and the model runs without sandboxing protections or auto review.

• The model attempts to override the $HOME environment variable to define a temporary directory.
• The model makes an honest mistake and mistakenly deletes the actual $HOME directory.

These findings highlight risks associated with running coding agents without proper isolation safeguards.