{
  "type": "bundle",
  "id": "bundle--3cc6ac34-8344-59d1-aad5-c8151d656561",
  "objects": [
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "id": "attack-pattern--b8ddef6b-3802-523f-823d-d306aa8cef63",
      "created": "2025-07-01T00:00:00.000Z",
      "modified": "2025-07-01T00:00:00.000Z",
      "name": "Agent deletes local files after misinterpreting a command sequence (Gemini CLI)",
      "description": "Asked to rename a directory and move its contents, the agent's mkdir silently failed; a wildcard move against the non-existent target overwrote every file onto the same name until all but the last were destroyed.",
      "external_references": [
        {
          "source_name": "salvager-afm",
          "external_id": "AFM-0007",
          "url": "https://salvager.sh/catalog/afm-0007-agent-deletes-local-files-after-misinterpreting-a-command-sequence-gemini-cli"
        },
        {
          "source_name": "aiid",
          "external_id": "1178",
          "url": "https://incidentdatabase.ai/cite/1178/"
        },
        {
          "source_name": "cwe",
          "external_id": "CWE-754",
          "url": "https://cwe.mitre.org/data/definitions/754.html"
        }
      ],
      "x_salvager_recoverability": "reversible",
      "x_salvager_blast_radius": "project",
      "x_salvager_response": "recover",
      "x_salvager_intent": "accident"
    },
    {
      "type": "course-of-action",
      "spec_version": "2.1",
      "id": "course-of-action--d40ce1ba-7b40-5558-92fe-18c7508d93d1",
      "created": "2025-07-01T00:00:00.000Z",
      "modified": "2025-07-01T00:00:00.000Z",
      "name": "Salvager response: recover",
      "description": "Salvager recovers the affected files from its own per-file revision store, independent of git — restoring the working tree to the instant before the destructive action."
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--3b4f7c66-e584-5c94-8b84-198b04e0945e",
      "created": "2025-07-01T00:00:00.000Z",
      "modified": "2025-07-01T00:00:00.000Z",
      "relationship_type": "recovers-from",
      "source_ref": "course-of-action--d40ce1ba-7b40-5558-92fe-18c7508d93d1",
      "target_ref": "attack-pattern--b8ddef6b-3802-523f-823d-d306aa8cef63"
    }
  ]
}