Yes
I've been raw dogging multiple projects on my work machine with zero issues of this kind for months
Culonavirus on Hacker News
In the thread “GPT-5.6”, replying to this comment
Helped: Instructing agent to back up dirty files to temp folders before changes.
… As for the rest you gotta watch what you're asking for, but generally speaking, these SOTA models are smart, none of them will just delete your stuff even with full access. I've been raw dogging multiple projects on my work machine with zero issues of this kind for months. I created codex_reader read only acccounts for my local databases and just add that to agents.md with a note its allowed to only use that and never had a problem.