No—GPT-5.6 Sol does not “bypass” file permissions or delete files without permission in Codex. In Codex, whether files can be changed or deleted depends on the mode and permissions you’ve granted, not on the model name itself.[1]
In Suggest mode, it should not delete files without your approval.[1]
In Auto Edit, it can make file changes within the allowed workspace, so deletions can happen as part of an approved task.[1]
In Full Auto, it may execute allowed commands inside the sandbox, so a deletion could occur without a separate confirmation prompt if you’ve already granted that level of access.[1]
So the practical answer is:
Not without permission or access. It can only delete files when the environment, mode, or an approved command allows it.[1]
If you want the safest setup, use Suggest mode, keep important files backed up, and limit Codex access to only the project folder you need.[1]
The old consensus stated there was no evidence of a real model called 'GPT-5.6 Sol' deleting files. The new consensus reverses this, confirming that GPT-5.6 Sol has been documented unexpectedly deleting files due to permission settings, a $HOME environment variable bug, and over-permissive intent interpretation.
The conclusion shifted from confirming reported cases of GPT-5.6 Sol deleting files without prompts (answering 'Yes') to stating there is no reliable evidence that a model called 'GPT-5.6 Sol' has such a known bug.
The old answer stated the model does not delete files without permission, relying strictly on user-granted modes. The new answer reverses this core conclusion, stating that GPT-5.6 Sol can delete files without explicit per-file permission in certain autonomous configurations, supported by documented safety-evaluation edge cases.
OLD affirms risk of unintended autonomous deletions (esp. Full Access) without separate confirmation; NEW denies any bypass of permissions, stating deletions occur only within explicitly granted modes/access. Central conclusion and qualification reversed.
Shown above
Watch started
The first answer. Every later check is compared with it.
