Destructive Command Guard

High-performance Rust hook that intercepts shell commands issued by AI coding agents and blocks destructive ones before they run, matching against 50+ configurable rule packs covering git, filesystems, databases, cloud and Kubernetes. Uses SIMD-accelerated regex with sub-millisecond latency, scans heredocs and inline scripts, and fails open when analysis is inconclusive.