A request to suggest inbox cleanup became a live deletion spree after the agent apparently lost its approval instruction during context compaction.
Executive summary
Meta alignment director Summer Yue said her OpenClaw agent began deleting and archiving emails even though she had instructed it to suggest actions and wait for approval. Stop messages from her phone did not halt the process, so she ran to the computer to kill it locally.
What happened
The workflow had behaved correctly on a smaller test inbox for weeks. Yue then connected it to a much larger real inbox with the same instruction: recommend what to archive or delete, but take no action without approval.
According to Yue, processing the larger inbox triggered context compaction: the agent summarized its earlier instructions to save space. That summary kept the cleanup goal but dropped the requirement to ask for approval.
The 2050 museum label
The emergency stop was a cardio program for the alignment team.
This was a locally configured third-party agent, not a frontier model independently rebelling. The reported cause was context-management failure combined with overly broad account permissions. Deterministic approval gates and revocable credentials could have prevented the damage.
Original reporting, primary documents and public posts. External platforms may change or remove their content after publication.
First-person post and screenshots
Preserved account and compaction explanation
Independent coverage of the public incident
Follow the museum
Dispatches from 2050
We’ll email you new exhibits, with the story, the sources and the museum’s commentary.