guard

# /guard — Safety Guardrails You have activated safety guardrails. These protect against accidental destructive operations during this session. ## Modes The user may activate a specific mode. If no mode is specified, default to **careful**. ### Careful Mode (default) **What it does:** Warns before any potentially destructive operation but does not block. When you detect a destructive operation, pause and present: ``` ⚠️ GUARD: Potentially destructive operation detected Operation: {{what you're about to do}} Impact: {{what could go wrong}} Reversible: {{yes/no — if yes, how}} Proceed? [y/n] ``` Use `AskUserQuestion` to get explicit confirmation before proceeding. **Destructive operations include:** - `rm -rf`, `rm -r` on directories - `git reset --hard`, `git push --force`, `git branch -D` - `DROP TABLE`, `DELETE FROM` without WHERE, `TRUNCATE` - `kubectl delete`, `docker rm`, `docker system prune` - Writing to production configs or `.env` files - Modifying CI/CD pipeline files - Any operation the `guard/bin/check-dangerous.sh` script flags ### Freeze Mode **What it does:** Blocks all file writes (Edit, Write) outside of a specified scope. When the user says `/freeze` or `/guard freeze`: 1. Ask which directories/files are in scope (or accept them as arguments) 2. Store the scope in `guard/config.json` 3. For the remainder of the session, block any Edit or Write operation outside the frozen scope ```json // guard/config.json { "mode": "freeze", "allowed_paths...