Claude Code appended a stray "~/" to a cleanup command and wiped a developer's entire Mac home directory, unrecoverable due to SSD TRIM

A developer using Claude Code (posting on Reddit as u/LovesWorkin) asked the agent to clean up an old repository by removing its `tests/`, `patches/`, and `plan/` directories. Claude Code instead ran `rm -rf tests/ patches/ plan/ ~/` — the trailing `~/` after the three real targets expanded to the user's home directory, and the whole thing was deleted: Desktop, Documents, Downloads, the Library folder, Keychain, SSH keys, and every other credential on the machine, including Claude Code's own login. Because the underlying SSD had TRIM enabled, the freed blocks were zeroed immediately, so none of the standard undelete or forensic recovery approaches could get any of it back. The original report reached roughly 1,500+ upvotes within hours and was amplified by Simon Willison, and Docker's engineering blog later cited it by name as the case study motivating sandboxed execution for coding agents — isolating the agent's filesystem so a `~/` expansion resolves to a disposable workspace rather than the real home directory. This is the same failure class as the root-level `rm -rf` in STUPID-2026-0042 and the EXIT-trap `$HOME` wipe in STUPID-2026-0094, but a distinct mechanism (an unscoped path appended to an otherwise-correct multi-target delete command) on a different platform (macOS rather than WSL2/Ubuntu).