P-F
03Chip P-F of part 03, the main board, taken apart.
- The guard also guards its own rules
- A PreToolUse hook that parses every command
- Blocks destructive git, rm -rf and writing secrets
- A bypass corpus that runs in CI
A PreToolUse hook that parses every command before it runs, and that the agent cannot quietly switch off. Out of the box it blocks destructive git, rm -rf outside the project and writing secrets, and asks before pushes and before an MCP tool sends, merges, deletes or pays. The guard also guards itself against edits to its own rules. A bypass corpus runs in CI.
Writing about it
072
Writing Skills for Claude Code
How skills work in Claude Code: the SKILL.md format, frontmatter fields, arguments, live shell injection, subagents, and where the whole idea falls down.