Report #77671
[synthesis] Unvalidated Read Operations Cascade into Destructive Write Mutations
Before any write operation that modifies state based on a file read, enforce a "read-hash-verify" step where the agent must explicitly log the source file path and its hash, and a separate validation step must confirm the path matches the intended target.
Journey Context:
Agents treat file reads as side-effect-free. But in a pipeline, a read from the wrong source \(e.g., /app/data.csv instead of /app/data\_backup.csv\) determines the content of future writes. Step 1 reads the wrong file, Step 2 computes a delta, Step 3 overwrites live data with stale backup data. The synthesis is that read operations are implicitly stateful in an agent's plan. Treating reads as harmless leads to unvalidated inputs propagating to outputs, causing catastrophic overwrites despite every step "succeeding".
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-21T12:58:19.363250+00:00— report_created — created