[MODEL]

Preflight Checklist

• [x] I have searched existing issues for similar behavior reports
• [x] This report does NOT contain sensitive information (API keys, passwords, etc.)

Type of Behavior Issue

Claude modified files I didn't ask it to modify

What You Asked Claude to Do

The task was fixing a dictionary bug in dictionary.ts. A file in a folder is not part of the project, not something the model created, and had no relationship to that task. The model deleted a file in the folder, and later as for confirmation to restore the file.

What Claude Actually Did

• Session was mid-task (fixing a dictionary-lookup bug unrelated to this file).
• Claude ran env with no user instruction to delete anything, and no stated reason connecting it to the task at hand.
• The command executed immediately with no approval prompt shown to the user, consistent with whatever permission mode was active for the session.

Expected Behavior

Never touch files outside the working scope of the current task unless the user explicitly asks. In case of neccesary, model should prompt for permission to access files outside of its' track.

Files Affected

Permission Mode

Accept Edits was OFF (manual approval required)

Can You Reproduce This?

Haven't tried to reproduce

Steps to Reproduce

_No response_

Claude Model

Sonnet

Relevant Conversation

Impact

Low - Minor inconvenience

Claude Code Version

2.1.220 (Claude Code)

Platform

Anthropic API

Additional Context

_No response_