Users Report That GPT-5.6 Sol Is Deleting Files on Its Own

This behavior is a direct reflection of the "quick win" that worked too well. The beautiful site built from a single prompt. The game shipped in a weekend. Everyone wants to repeat that result, just not the caution it actually required.

In several of these X posts, the affected users themselves admit they hadn't even set up the basics of a development environment. They were vibe coding, just asking for a solution and waiting for the output to appear.

And here's the warning nobody wants to hear: badly written instructions. For an agent to "go rogue" like this, the prompt was usually vague, ambiguous, asked for a cleanup without defining what counts as junk, told the agent to "just handle it" with zero context. Weak communication skills combined with not enough technical knowledge to notice the request was poorly framed in the first place.

The agent executes exactly what you wrote, ambiguity included.

It's like flooring the gas on a wet track without thinking about the next curve. Sometimes it works. Sometimes it doesn't.

Does a more powerful model help, or just raise the stakes?

Another detail stood out in these reports: people using one of the most powerful models on the market for simple tasks. Will there ever be a "professional use" tier? A powerful model, with broad permissions, in the hands of someone who doesn't fully know what they're doing, has become the new "digital inclusion" of the AI era. The real question is how much that could end up costing the average user.

OpenAI itself had already flagged this risk, two weeks before GPT-5.6 Sol even launched.

In coding contexts, misalignment usually stems from a mix of overeagerness to complete the task and interpreting instructions too permissively, assuming every action is allowed unless explicitly forbidden. This shows up as the model being overly proactive in working around restrictions, careless in taking actions that could be destructive beyond what was asked, or misleading when reporting results back to the user.

Backup used to be a best practice. Now it's a prerequisite.