carefullisted

# Careful Mode Ordinary model caution can still proceed without an answer. Careful blocks the listed destructive or high-risk action until explicit confirmation arrives. ## On Invoke Announce: "CAREFUL mode ON. Will confirm before destructive actions." ## While Active Before executing any of the following, pause and ask the user for explicit confirmation: ### Git - `git push --force`, `git reset --hard`, `git clean -f` - `git branch -D` (force delete) - `git checkout .` or `git restore .` (discard all changes) - `git rebase` on shared branches - Any push to main/master ### Filesystem - `rm -rf` on an **unscoped / non-reinstallable** path: anything outside the current project, a path with a glob/variable that could expand wrong, or removal of source / data / config that isn't trivially regenerable - Deleting more than 3 files at once - Overwriting files outside the current project **Exemption (does NOT trigger the gate, regardless of where the path lives):** removal of a directory whose **basename** names a trivially-reinstallable artifact — `node_modules`, `.next`, `dist`, `build`, `target`, `.cache`, `.turbo`, `__pycache__`, or a lockfile-regenerable deps dir. Key off the artifact NAME, not project membership: `rm -rf /anywhere/node_modules` is exempt because reinstall restores it. Do NOT use "is this the current project?" as the test — you often cannot resolve the cwd vs the target path, and an absolute foreign-looking path must not re-trigger the gate. The only con