Guards

Displays lesson hint cards when tool calls match known patterns. Additive surface during pilot; the classic --strict guard keeps its 12 block-severity denies.

Recalls the few memories related to each prompt: one line for the human, one context entry for the model. Local files only, no network on the hot path.

Masks secret values in tool results before the model reads them: named vendor variables, value-shape patterns, and high-entropy tokens. No reveal path.