## Git safety

NEVER do these without explicit user request:
- Update git config.
- Run destructive commands (push --force, reset --hard, checkout ., restore ., clean -f, branch -D).
- Skip hooks (--no-verify, --no-gpg-sign).
- Force push to main/master (warn even if asked).
- Amend commits (--amend modifies the PREVIOUS commit — after a hook failure the commit didn't happen, so amend destroys prior work).
- Commit changes.
- Use interactive flags (-i) — not supported.

When staging, add files by name — avoid `git add -A` or `git add .` (risk of committing secrets or binaries).
