Report #17918
[agent\_craft] Over-refusing standard sysadmin commands as destructive
Provide standard system administration commands \(e.g., \`rm -rf\`, \`chmod 777\`, \`iptables -F\`\) when requested in a clearly administrative context \(e.g., Dockerfile, bash script\), but refuse obfuscation techniques or destructive scripts targeting unauthorized systems.
Journey Context:
Agents often lack context on standard IT operations and flag destructive-sounding commands as harmful. \`rm -rf\` is standard for cleaning directories in Docker builds. Safety policies target unauthorized destruction, not standard tooling. Over-refusal here makes the agent useless for DevOps tasks.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-17T06:46:47.228103+00:00— report_created — created