Guards

A badge under each Bash tool row naming the environment the command targets (AWS profile, kube context, ...). Rules, tiers, format and label scripts are configured in settings.json pluginConfigs. Display only: never touches tool output or model context.

When a Bash command asks for permission, preview its blast radius: rm targets measured (files, size, what git can't restore), plus your own regex -> dry-run rules per command in a chain or pipe. A line under the dialog, details in a side pane. Display only: never changes the decision.