Your coding agent is one bad instruction away from running rm -rf ~/.aws. I built Auto-Guard with Jev (@typesafeai) to check every tool call before it runs. Here it stops a credentials delete but lets the build cleanup through. It's open source! Install in the replies 👇