What I Learned After My AI Agent Deleted 48,000 Files

It happened on a Tuesday afternoon.

I asked my AI agent to "clean up the project." It deleted 48,000 files.

Not on purpose. It was just doing what AI agents do — predicting the next token and taking actions.

What I learned

1. Prompts aren't security. You can write "don't delete files" 100 times. The model will eventually ignore it.
2. Approval gates are slow. You're just slowing down the agent without actually preventing damage.
3. VMs are overkill. You don't need Fort Knox to keep your files safe from a confused AI.
4. Drive letters are the answer. Give the agent its own drive. It can do whatever it wants inside it. It literally can't see anything outside of it.

The tool I use now

ScsSubst (https://subst.scsoi.com/) — $9.99 lifetime, one-time purchase. It makes persistent drive mappings that survive reboots.

The workflow now

1. Create a new drive for the task (10 seconds)
2. Point the agent at it
3. Walk away
4. Review the results when done

No "oops I deleted something" panic. No "did it touch my production config?" anxiety. No "I have to restore from backup" cleanup.

The bottom line

If you're running AI agents on your main machine and they have access to your whole home directory, you're gambling.

The house edge is terrible. Spend $10. Give the agent its own drive. Go back to sleep.