Setup Git Guardrails

Sets up a pre-tool hook that intercepts and blocks dangerous git commands before the agent executes them. The bundled hook reads a tool-call JSON payload on stdin and exits non-zero to veto the command — the same contract most agent harnesses use for pre-execution hooks.

What Gets Blocked

• git push (all variants including --force)
• git reset --hard
• git clean -f / git clean -fd
• git branch -D
• git checkout . / git restore .

When blocked, the agent sees a message telling it that it does not have authority to run these commands.

Steps

1. Ask scope

Ask the user: install for this project only or all projects (global)?