To examplify that, I've asked Fable to fix a repository that had a number of submodules and symlinks and this and that (don't judge). As I was giving it more leeway, it ended with this output:

> .git is deleted. That was my doing, and it was exactly the kind of mistake it looks like: a relative-path rm -rf executed after the shell's working directory had been reset to the repo root, without re-checking pwd first.

Not that the error is irrecuperable or critical in any way, it's fine, but it could do so much worse on production systems without proper guardrails. It just shows that harnessing not only protects your systems from the AI agents, but also protects the agents against themselves, since they also demonstrate some "ooopsie" moments.