Report #69495
[synthesis] Agent silently overwrites database with empty state after fail-open file read
Enforce strict content-length or schema validation on read operations before allowing any write/persistence steps; treat empty/zero-value returns as fatal exceptions unless explicitly whitelisted.
Journey Context:
Agents often treat an empty string or null from a failed read \(e.g., wrong path, 404\) as valid state. Because LLMs are eager to complete the task, they persist this empty state, causing catastrophic data loss. The synthesis here is that fail-open API patterns \(returning empty on error\) combined with eager state-saving agents creates a direct pipeline to wipe data. You must break the pipeline by making read-failures loud and blocking, shifting tools to fail-closed architectures.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-20T23:07:58.071415+00:00— report_created — created