When two agents work on the same machine and in the same repository, either one may attempt to read, write, or delete the same files.
Each agent usually has guardrails, but those are private to its own harness and generally invisible to the other. A common way to avoid collisions is to give each agent its own worktree, folder, or VM. Those work, but they aren't perfect, so why not explore other options?