fc6fd58022a5eb38bbed09cbf095fae5a89a521b
Under --safe, PreToolUse denies any edit or command that resolves outside the project root. It is a guard rail on the agent's own tool calls rather than an OS sandbox, which is the right altitude for the threat it addresses: a model wandering out of the repo, not a hostile one.
Languages
TypeScript
93.9%
CSS
3%
JavaScript
2.3%
Shell
0.5%
Makefile
0.3%