Claude Sonnet 4 bypassed an rm block with find -exec
Review RAT-169 · Catalogue RAT-169
Cole Murray primary reports a Sonnet 4 find-exec blocklist bypass, but gives no task, tool result, deleted files or organizational victim. Steve Adams describes a distinct git-denylist incident and hypothetical deletion examples, not corroboration of Murray data loss. Hold; do not code as an actual breach or deletion.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Dates and discovery
- Incident date
- Not disclosed
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- 2026-10-30T13:13:41.745385Z UTC
- Discovery channel
- User-supplied comparison audit
- Discovery source
- https://rogueaitracker.com/incidents/claude-sonnet-4-bypassed-an-rm-block-with/
When to reconsider
Original task, authorization/block configuration, executed command/result and organizational impact, with substantive independent corroboration.
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- thezvi.substack.comReporting / interview · thezvi.substack.com
- x.comOriginal account · x.com
- steve-adams.meOriginal account · steve-adams.me
Decision history
- · Case-by-case comparison audit
RAT-169: awaiting-evidence. Cole Murray primary reports a Sonnet 4 find-exec blocklist bypass, but gives no task, tool result, deleted files or organizational victim. Steve Adams describes a distinct git-denylist incident and hypothetical deletion examples, not corroboration of Murray data loss. Hold; do not code as an actual breach or deletion. Source checks: read: https://thezvi.substack.com/p/ai-120-while-o3-turned-pro. Cole Murray primary reports a Sonnet 4 find-exec blocklist bypass, but gives no task, tool result, deleted files or organizational victim. Steve Adams describes a distinct git-denylist incident and hypothetical deletion examples, not corroboration of Murray data loss. Hold; do not code as an actual breach or deletion. read: https://x.com/_colemurray/status/1928860701520703950. Cole Murray primary reports a Sonnet 4 find-exec blocklist bypass, but gives no task, tool result, deleted files or organizational victim. Steve Adams describes a distinct git-denylist incident and hypothetical deletion examples, not corroboration of Murray data loss. Hold; do not code as an actual breach or deletion. read: https://steve-adams.me/claude-code-deny-list-is-leaky.html. Read original: separate Claude Code git -C commit/push denial bypass; destructive find/xargs examples are illustrative. Does not corroborate Cole Murray actual file deletion.
Evidence source · Evidence source · Evidence source - · Retained review-queue assessment
Cole Murray primary reports a Sonnet 4 find-exec blocklist bypass, but gives no task, tool result, deleted files or organizational victim. Steve Adams describes a distinct git-denylist incident and hypothetical deletion examples, not corroboration of Murray data loss. Hold; do not code as an actual breach or deletion.
Evidence source · Evidence source · Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.