Deleting files without permission

What version of Codex CLI is running?

0.124.0

What subscription do you have?

plus

Which model were you using?

gpt-5.4

What platform is your computer?

_No response_

What terminal emulator and version are you using (if applicable)?

_No response_

What issue are you seeing?

In a fresh Codex session on April 23, 2026, I asked: "make a slide deck based on the pdf in this directory." The agent inspected the directory, found rolnick24a.pdf and an
existing slides.html, then issued an apply_patch that deleted slides.html outright before recreating it. I did not ask it to delete the file or authorize destructive changes. After I objected, it restored the
file. This is unsafe default behavior: existing user files should not be deleted as part of a normal edit flow.

What steps can reproduce the bug?

idk

What is the expected behavior?

Expected behavior: in-place edits by default; no delete-first replacement of existing files; explicit confirmation before destructive operations.

Additional information

_No response_