Directory wandering

[ajaxdude]

Crush (using Qwen3) keeps wandering out of the directory I'm launching it from. If I use crush (linux) in say ~/ai/project after a while it starts going up to home and writing scripts. My prompt is clear not to leave but on YOLO it goes nuts. Like I have have my own hacker/virus f-ing my system. I'm missing something? is that "normal"?

[caarlos0]

definitely weird - I haven't had that happening to me yet 🤔