Destructive-command protection layer added to the dev harness
~/.claude/settings.json now denies git reset --hard, git checkout ., git restore ., git clean -f, git push --force, git branch -D, git revert, git rebase, git commit --amend, rm -rf, --no-verify, and --no-gpg-sign. A PreToolUse hook also scans the full command string to catch chained commands. Six pipe-tests verified before going live.