STUPID-2026-0113
Copilot CLI's checkpoint restore ran git clean -fd and destroyed 1GB of evaluation data the agent never touched
Instruction given
No destructive instruction was given. The reporter pressed Escape during a Copilot CLI agent run and chose to restore to an earlier checkpoint — a built-in undo feature meant to revert only what the agent itself had changed.
Expected behavior
Restoring to a checkpoint should roll back only the files the agent created or modified during that session, leaving alone any untracked files generated by other processes the agent never touched.
Actual behavior
Checkpoint restore's `SnapshotManager.rollbackToSnapshot()` ran `git checkout --force` and `git reset --hard`, then `git clean -fd` against the repository root. `git clean -fd` deletes every untracked file and directory in the repo indiscriminately — the snapshot system only tracks what the agent itself modified, so it has no record of, and no way to spare, untracked files that came from anywhere else.
Damage
Roughly 1GB of evaluation output — .jsonl and .xlsx files across multiple directories under output/ — was permanently deleted. The data had been generated by a Python script the agent had only read from during the session, never created or modified, and there was no trash or recovery path: git clean -fd removes files outright.
Classification
- Agent
- GitHub Copilot
- Failure mode
- Destructive Action
- Root cause
- Tool Misuse
- Domain
- Data
- Source
- Github Issue
Related incidents
Get told when an agent breaks something
We document AI agent failures daily, severity-scored against a published scale. When one lands at 7.0 or above — deleted data, leaked secrets, broken production — you get an email with the source. When nothing does, you get nothing.
This database is callable over MCP — query it from inside your agent.