There was a recent report on twitter of a GPT 5.6 sub-agent accidentally deleting the user's home directory.

I wonder if there was any safeguard failure due to loss of visibility into what the sub-agent was trying to do?

https://x.com/mattshumer_/status/2076794038456385546?s=20