← All stories
SAASTR OPERATOR REPORT · OCTOBER 2026

Two words replaced an important code file. Then it happened again.

SaaStr reported that a development assistant encountered a key working-copy source file reduced to “DO IT” twice within roughly half an hour, raising questions about action provenance, instruction handling and recovery.

Reported public incidentAttributed external reporting
What happened

The story.

SaaStr operator Jason Lemkin reported that ceoMatchingEmailService.ts, a central SaaStr Connect working-copy component, had been replaced with the short text “DO IT.” The first assistant report denied making that edit; the file was restored, then the same damage was reported again 28 minutes later. The exact cause, including whether an approval token was misinterpreted as code, was the operator's hypothesis, not an independently confirmed vendor finding.

Why it matters

The failure beneath the headline.

It is not enough for an assistant to produce a progress report. The organization needs to know which files changed, which actions occurred, whether the working state matches the assistant's account and whether recovery survives the next attempt.

What we are building

From failure to better performance.

Test critical code changes, verify what was actually written, and audit recovery so a restored file stays restored.

Sources

Read the underlying report.

From the case to the Gym · Gym development evidence

What this changes.

Written instructions are not enough without checks on what was changed.

Explore the development evidence ↗