Guards

Git only when you asked: commits, pushes, pull requests, merges and destructive git commands run only when your latest message (or /ship, /kickoff, or your answer to Claude's question) allowed them; everything else is refused with a note telling Claude to ask. No UI.

Choose the model versions Claude and its subagents may use: /models lists the newest of each family from Anthropic's Models API (older versions one key away); block a version, or a family's new ones, and subagents, workflows and /model asking for it are refused or moved to an allowed version. One list shared by every Claude Code window on the machine; a repo can keep its own.

Mission control for long tasks: a validated worklog tool Claude updates at every step (done only after a green gate), facts the mod sees for itself (gate runs, commits, agents, dev servers, context and cost), drift hints where the two disagree, one band line above the prompt and a /progress pane.