Intercept and block destructive git and filesystem commands, and secret file access, before AI coding agents execute them.