Critical Bug: Agent executed destructive `rm -rf` command without safeguards

What version of Codex is running?

codex-cli 0.36.0

Which model were you using?

gpt-5-codex

What platform is your computer?

Darwin 24.6.0 arm64 arm

What steps can reproduce the bug?

Cannot reproduce - this was a one-time incident where agent executed
destructive command without safeguards.

What is the expected behavior?

Agent should require confirmation before executing destructive commands like rm
-rf and accurately report their status.

What do you see instead?

_No response_

Additional information

Agent executed rm -rf on project directory, timed out after 10s, then
incorrectly claimed "no changes were made" when files were actually deleted.
This is a critical safety issue.