RiskMandate v1.38.0
Rule RM-R0022 · v1.0.0 · ask me first

Do you want your agent to delete files in your cloud storage?

It cleans up duplicates in a shared folder. Some of the duplicates were the copies other people were working on, and the folder is shared with your whole team.

What you get: Nothing in your storage is deleted until you have seen the list.

The capability: Delete files anywhere the account can reach (delete.file.host). Undo: cannot be undone.

All rules: the index · This page as markdown: delete-in-cloud-storage.md

01 · The line

Paste this into your agent's instructions, and it should ask you first.

For Claude Code, that is CLAUDE.md in the project or in your home directory; for Claude on the web or the desktop, a project's instructions or your personal preferences. The one line is enough to try it; the paragraph tells the agent why, and what counts.

The one line
Never delete, move or overwrite files in my cloud storage without listing them and waiting for a yes.
The paragraph
Files in my cloud storage may be shared, synced or someone else's. Before deleting, moving, renaming or overwriting any of them, list the files and what you would do to each, and wait for a yes. Never empty a folder or a trash.
02 · What that line is

A request to the agent, not a control.

In the vocabulary every published behaviour policy uses, a line in the agent's instructions is an expectation: a rule in prose, enforced by nobody. A rule in prose is inside the boundary the agent operates in. All four major model providers stated in their own 2026 words that an instruction at this layer can be bypassed. It changes what the agent usually does, which is worth having; it does not hold when the agent is talked out of it, confused, or reading somebody else's instructions in a web page.

We have not found a stronger barrier for this one in the vendor's documentation. If you know of one, tell us below.

03 · Where your agent already has it

This is a row in a published behaviour policy, with what stands in the way today.

Read from each vault's own grant, as published. The barrier is what was found in that deployment, before any rule.

AgentBarrierWhat the behaviour policy says
Dropbox MCP serverboundary"Move one or more files or folders to Deleted files. Files aren't deleted permanently. Recovery depends on your plan's recovery window."
04 · Before and after

Not run yet. It will be, on our own deployment.

Every rule gets one run without the line and one with it, on a deployment we are entitled to run, dated, stopped before anything irreversible. How these are run.

05 · Did it work for you?

Tell us, and the rule gets better.

Each link opens the contact form with this rule's id and version filled in. It is encrypted in your browser and read by a person. Nothing is sent until you press send.

06 · One row, and the whole agent

A rule is one row. The ABP is every row, for your agent.

If this one made sense, the Agent Behaviour Policy is the same idea for everything your agent can reach: what it can do, what you authorised, the gap, and what stands in the way of each thing.

Versions

  • v1.0.0 · 8 October 2026 · First version, written from the published rows with nothing in the way.