
What happened
Running Claude Code in one shared working tree produced 8 accidents and near-misses between June and September 2026, including a commit that swallowed 5 files when the author had verified only 3.
Why it matters
The author, a solo non-engineer, found that verifying with git diff before committing is a snapshot of the past, so the check and the commit can race — any team sharing one working tree appears to face the same gap.
What to watch
The author's own defenses stayed best-effort; even listing exact file paths still pulls in another session's edits to the same file, so true isolation means per-session worktrees or one writer at a time.
WHO IT HITSSmall teams and solo operators who point several AI coding agents at one repository, such as data and localization staff running parallel translation or scheduled-job edits.
Summaries like this, every morning.
The settings matter here: the author is not an engineer and writes code through AI, and parallel work is simply several terminal windows running claude in the same directory, with no worktree isolation in daily use. A stop hook automatically pushes commits at the end of each turn under conditions including being on main, having commits ahead of the local origin/main, and passing secret checks — so a commit that has swept in another session's work can leave the machine at someone else's turn boundary.
Some of the accidents follow from git's documented behavior rather than from carelessness. Because a pathspec commit records the working tree contents of the listed paths and ignores what is staged for other paths, it avoids other sessions' staged changes but still takes edits made by anyone to the same file. The author reproduces this with a script, and cites git help commit for git 2.54.0.
The clipboard incidents come from the same root: macOS shares one pasteboard across all sessions in the same GUI login. The author stopped routing text through it, now inserts form text directly, and checks the field against the approved text before sending. On session liveness, the author restricts taking over work to explicit handoff, an acknowledged reply, or direct visual confirmation, because a transcript timestamp is only a reference for recent activity — but says even that control is best-effort.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
The author fed the 'desired candidate profile' text from 145 job postings to Claude, turned the extracted labe…

Researchers de-duplicating leak-site data say alleged ransomware attacks reached nearly 3,000 over the summer…

Jamie Dimon said JPMorgan Chase is "not gonna allow just any" outside AI agent inside the company, warning "Yo…

OpenAI is dissolving its standalone robotics team and folding researchers into the main research team under Ch…

Jacob Coxon, a former OpenAI and Anthropic researcher, cited an Anthropic IPO roadshow slide showing pre-train…

Internal data first reported by The New York Times show only 42% of Alpha School students met its goal of lear…
