Automation

Before a risky Bash command runs, says what it will touch. A plain deletion is judged by git: files outside git or tracked and clean get only a short label, a Ukrainian dialog (with the rm line, the number of files and a typed 'Other' decision) is for uncommitted changes, the home folder, more than 20 files and other hard risks. Static analysis plus read-only git, nothing is executed to preview.

Saves every image (screenshot) returned by a tool to a folder the user picks: the first screenshot asks for the path, the answer is remembered. /evidence-dir shows, sets or resets it.

In VS Code (no band above the prompt) the typed /compact and /clear ask first (confirm / cancel). The Compact and Clear buttons of the desktop and terminal are in the hud band.

Asks before git push and wrangler --remote, showing the folder, the branch, the remote and the commits that will go out. Understands git -C dir and cd dir &&. Fail closed.

Denies Edit/Write/Bash writes to Claude config paths the sandbox cannot write (settings, skills, plugins, hooks, projects, ...) and tells Claude to hand the user a ready Terminal command instead of trying workarounds.

Checks Claude's claims (tests pass, verified, fixed, no regression, API returns N) against the tool calls that actually ran. Unsupported claims get a visible warning; /evidence lists claims and the evidence behind each. Warns only, never blocks.