Guards

Switches the Claude in Chrome extension between named browser profiles with select_browser, which needs no approval click, and picks the default before the first browser call of a session.

After a deploy command succeeds, curls the live URL with cache-busting and puts the verdict in the model's context, so a deploy cannot be claimed without evidence.

After every Edit, Write, NotebookEdit or sed -i, a docked pane shows that file's uncommitted hunk with [keep] and [revert] buttons; a press dismisses or runs git checkout with no model turn.

Denies a Bash merge (gh pr merge, git merge on main, push onto main) unless the latest human message says the word merge; ship, push and deploy do not count.

Routes heavy Bash commands (test suites, builds, Docker) to a second machine over ssh, with the PATH export and working directory already right, and the commit synced first.

Keeps a per-turn tally of edits, runs, curls and destructive commands and shows it on the turn footer; a claim with no run flags the spinner, a destructive Bash unfolds its tool group, and an edit-without-run turn suggests running the tests.

Counts the distinct files a turn edits and stops at a threshold to make the goal get restated, so a small ask cannot quietly become a refactor.

A pixel-art Ragtag athlete above the prompt who does a rep every turn: the session is an AMRAP of thrusters, burpees and pull-ups.