Status line

Keeps GitHub Actions spend in sight: the month's minutes and cost for the repo's organisation or account, GitHub budgets, cache and artifacts, risky workflows as they are written, and runs that hang

Blocks destructive shell commands and access to secret files before they run, anywhere in a compound command

Keeps secrets that tools print (keys, tokens, passwords, private keys) out of what the model reads and the next request sends