Status line

Has Cloudflare's Clef decision model judge each Bash, Write, Edit and WebFetch call (risk, kind of risk, whether it is read-only, whether it fits your request), asks you itself before risky or always-ask operations, and can approve plain reads for you.

Before Claude ends a turn that changed files, has Cloudflare's Clef decision model check that the work is shown to be done (tests run and passing where needed, claims backed by the steps, nothing asked for left undone), and sends Claude back if not.