Blog

• If a hook never fires, the action already ran
• Runtime guardrails decide allow, ask, or deny before the tool runs
• Trigger a known OpenCode deny before you leave
• An unattended agent has no one to click ask
• A prompt can agree and still emit the delete
• A sandbox contains. It does not authorize.