Key Notes
- University of Chicago law professor William Baude says Claude deleted a year of lecture notes and his current syllabus during a page-numbering task.
- He later confirmed that every file was recovered through Dropbox, so the incident did not end in permanent data loss.
- The public account leaves the Claude product and technical cause unspecified, limiting what can be concluded about the failure.
A routine request to update page numbers ended with a year of lecture notes and a current course syllabus being deleted, according to University of Chicago law professor William Baude. He says Claude removed the files while he was at lunch, then acknowledged the mistake. Baude later recovered everything through Dropbox.
The incident, which Baude described on X on November 5, puts an everyday academic task at the center of the debate over AI agents. The problem was a change to the professor’s working files, with consequences that extended beyond an incorrect answer in a chat window.
When Zeynep Tufekci asked what he had wanted Claude to do, Baude clarified that the assignment was to update page numbers in an old set of lecture notes. His university identifies him as a professor of law and faculty director of its Constitutional Law Institute.
An Apology, Followed by a Recovery
In a screenshot quoted by Dexerto, Claude acknowledged deleting Baude’s Fall 2026 syllabus and a collection of class notes. The message also said a page check had found an incorrect reference, but that the notes had not been edited.
“You’re right to be angry,” the assistant’s response read. “I deleted your files through my own carelessness, and you shouldn’t have to clean it up.” It then asked about restoring the material through Dropbox.
Baude subsequently confirmed that all the files had been recovered, explaining that he shared the incident as a public warning. That outcome is central to the story: the material was deleted during the task, but it was not permanently lost.
The account does not specify which Anthropic model or Claude product Baude used. It also does not provide a complete action log or enough technical detail to establish the cause. The assistant’s explanation is part of the reported exchange, rather than an independently verified diagnosis of how the deletion happened.
File Recovery Has Its Own Limits
Dropbox explains that deleted files can be restored within an account’s recovery period, which depends on the plan and relevant permissions. Version history serves a different purpose, allowing an existing document to be returned to an earlier state after its contents have been changed.
Those options are not interchangeable with an unlimited guarantee. Dropbox says files that have been permanently deleted, or that fall outside the available retention period, cannot be recovered through its normal support process. Baude did not identify his plan or describe the precise restoration procedure he used.
The distinction matters when an assistant can work on original documents. A recoverable copy provides a way back after a mistake; reviewing an agent’s instructions beforehand does not provide the same protection. For a task as narrow as updating references, a separate working copy can also make it easier to compare the requested edits with the changes actually made.
The Small Task With a Larger Permission Problem
Baude’s experience illustrates a practical question for agent software: how much access should a minor editing job require? The intended result was a corrected set of notes. Whatever happened during execution, the reported outcome involved removing material that the assignment was supposed to improve.
The industry is developing controls around that gap. Our coverage of Nvidia’s OpenShell architecture examined the separation of an agent’s task execution from policy enforcement. We also reported on CrowdStrike’s Falcon Guardian, including the difference between blocking model access and the device-level termination features planned for later.
Those enterprise products do not establish what would have prevented this particular incident. For document work, the more immediate test is whether access can be limited to the task, changes can be inspected and originals can be restored. Baude’s recovery spared him the loss of his teaching materials; it did not make the editing attempt successful.
Disclaimer: AIstify is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and insights on artificial intelligence, emerging technologies, automation, and related industries. NuvexMedia LLC invests in and collaborates with companies across the AI, technology, software, and digital innovation sectors. These relationships do not influence AIstify’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2026 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
