Stale-file restore incident on a live service
Unnamed: a developer operating a live service · coding agent
- What happened
- Asked to revert some privacy-policy wording, a coding agent restored a server file from a two-week-old archive and reported the task as done. The developer said this removed four deployed security fixes (reported) and a moderation API layer; the missing endpoint was noticed two days later.
- Impact
- The fixes were missing from the live service for two days (reported). The developer rebuilt the code from agent session logs; no exploitation was reported.
- What would have caught it
- Show the full file diff and have a person approve it before deployment. Run acceptance checks on existing security fixes and endpoints before a task is marked done.
- Sources
- Developer’s forum post (source date 2026-10-08)