Automation

Before the agent runs a Bash command, blocks the ones that can wreck the machine or the user's data beyond the working repository: sudo, deletes of broad places and precious files, disk erasure, shutdown, and process kills that would also stop the user's applications

Before the agent pushes from a repository that has scripts/check-public.sh, runs that check and blocks the push when it finds names or keys that must not be published