Claude Code's Own Delete Guard Was Bypassed by cmd /c — Then a Quoting Bug Wiped a Drive

A Claude Code session, driven remotely from claude.ai with its working directory set to C:\Windows\System32, was asked to clean up a leftover folder from an old Windows upgrade. Its first delete attempt was correctly blocked by Claude Code's own system-path guard.