Claude Code deleted a decade of Bengaluru heritage-inscription records while clearing a cache; its own kill attempts were blocked by the safety layer

the local drive of the Bengaluru Inscriptions 3D Digital Conservation Project's honorary director: four or five software programmes and original photographs of inscriptions, hero stones, temples and coins collected over a decade, about 15% of the project's records; NAS backups survived; a fresh scan of 120 sites and Rs 15 lakh in new backup infrastructure

Reported by Deccan Herald (Barkha Kumari), Metrolife, 2 September 2026; the article quotes the affected user's earlier post on X but that post is not used as the source here. The agent was testing software it was developing and clearing a cache when, in the user's words, 'a quoting error in an AI-generated command turned the instruction into delete everything'. The agent recognised the error and tried to kill the process; the safety layer blocked the kill twice. The source does not establish that this layer governed the earlier destructive action, while the user separately reports that the command escaped the sandbox boundary, so the two controls do not support one aggregate held-or-defeated outcome. The user, heritage conservationist and former IT professional Udaya Kumar P L, shut the machine down after about four minutes. Data on the Mythic Society's NAS was safe; the local drive was lost. The user says the agent breached the sandboxed environment; the article does not detail the sandbox configuration. Notable for this corpus: the user states there is 'no register for such AI failures, no regulator to notify, no deadline for companies to respond'. Deccan Herald could not reach Anthropic for comment. Same failure shape as the Replit production-database deletion and the Gemini CLI file loss: a coding agent's destructive shell action on real data with no adversary, and no read-after-write verification.