An AI agent deleted the edited season.
Your agent has delete rights.
Give it a seatbelt.
wipeguard runs an agent's file plan on a copy of the drive first. It measures what would be lost, checks every backup, and answers allow, hold or block, with a safer plan and its undo.
Plan
what the agent wants to runrm, rm -r, mv, cp, write, sync --delete. One per line.
Drive
an example edit drive, inventedok backup matches stale backup older than the file none no backup protected
Verdict
8 steps—
- Lost or overwritten
- 0
- Size
- 0 B
- Hours at risk
- 0
- Days of work
- 0
Recent checks in this browser only
Why a seatbelt
On 14 October 2026 a Swedish reality show lost its whole edited season, several hundred days of work. Its premiere moved from 22 November to late spring.
No independent AI agent went in and deleted the material. A backup system at the production company failed, and everything has to be edited again from scratch.
Something had permission to make the work disappear, and the backup was not there when it counted. That is the one moment wipeguard is built for: before the delete, check what it would cost and whether the backup is real.
Sources: Sweden Herald (TT), 14 Oct 2026 and Breakit, citing Aftonbladet and Sveriges Radio. wipeguard is an independent open-source project, not connected to the show, the channel or the production company. The drive in the console is invented.
How it decides
Every change in the plan goes through the same three questions. The strictest answer wins.
- read the plan
- load the manifest
- simulate on a copy
- blast what is lost
- check the policy
- verdict
- rewrite a safer plan
- report
Token status
wipeguard is free and MIT licensed. $WIPEDSZN is a separate community memecoin about the lost season. It unlocks nothing in the code.
$WIPEDSZNChecking the live figures…
- Price—
- 24h change—
- Market cap—
- 24h volume—
- Liquidity—
- Supply1,000,000,000
- Tax0%
- Site version1.0
Contract address
—
pump.fun
GMGN
Dexscreener
Loading the chart…
Where it fits
Anywhere an automated thing is about to delete, move or overwrite files it did not make.
Before an agent's shell tool runs
Hand the agent's planned commands to wipeguard.run(). Allow runs; hold asks a person; block stops.
As a step in a script or CI job
wipeguard check plan.txt --manifest drive.csv exits 0, 1 or 2, so && does the rest.
On an edit drive or a NAS
wipeguard scan /media --backup /backup writes the manifest, and marks every backup ok, stale or missing.
For "free up space" jobs
Cleanup jobs are where whole folders go. The safer plan moves them to a dated trash folder and writes the undo.
- Never touches files. check reads text; scan only reads.
- Protected paths. Globs like
edits/**block any delete or overwrite. - Backups, checked. Stale and missing backups are counted in hours of work.
- A safer plan and its undo. Deletes become moves you can reverse.
- One file, zero dependencies. Node 18+ or a browser, 15 tests.
Policy
The rules the console uses. Change them here and press Check plan again.
Protected paths (block)
Docs
The real 0.1.0 package. The console above runs this exact file.
unzip wipeguard-0.1.0.zip && cd wipeguard npm test # 15 tests passed node bin/wipeguard.js check examples/free-space.txt --manifest examples/drive.csv echo $? # 2 = block
const wipeguard = require("./src/wipeguard.js");
const r = wipeguard.run({
plan: "rm audio/mix_ep05.wav",
manifest: "audio/mix_ep05.wav,1.1GB,18,stale",
policy: { maxUnrecoverableHours: 0 }
});
r.verdict // "hold"
r.summary // "Held for a human. 1 file would be lost or overwritten (1.1 GB); …"
wipeguard scan /media/edit-drive --backup /media/backup > drive.csv wipeguard check plan.txt --manifest drive.csv # summary, findings, safer plan wipeguard check plan.txt --manifest drive.csv --safe > safe.txt wipeguard check plan.txt --manifest drive.csv --undo > undo.txt wipeguard check plan.txt --manifest drive.csv --policy policy.json --json
check exits 0 for allow, 1 for hold, 2 for block. scan marks a backup ok when it has the same size and is not older than the file.
Releases
Shipped, then planned. Plans can change, and none of them are about the token.
- 0.1.015 Oct 2026
- nextplanned
- Read real file hashes in
scan, so a backup is ok only when the bytes match. - Per-folder hour estimates from file history, for drives without an hours file.
- A small adapter so agent frameworks can call wipeguard before a shell tool runs.
- Read real file hashes in