Guards

Stops Claude from editing files or running mutating git commands on main or master, and points it at a worktree instead.

Blocks Write, Edit and MultiEdit calls that target a path outside the project root or inside .git, plus optional deny globs.

Blocks Write, Edit and Bash calls that would put an API key, token or private key into a file or command.

Blocks Read, Write, Edit, Grep, Glob and Bash calls that touch .env files, private keys and credential stores.

Adds elapsed time, the running tool and the tool-call count to Claude Code's own spinner.

Blocks edits that make tests pass by weakening them: new skip/only markers, fewer assertions, a gutted test file, or deleting a test file.