joakimp
b06941d714
erdc-guard (fleet extension, not in the image) judges the text of every bash statement. Measured with its own assess(): ERDC_GUARD=off on a child pi does not help (the parent blocks the prompt text, 0.95); pi -p @file is not flagged; cat heredocs are flagged depending on contents; /guard off is volume-wide and keeps confirm-destructive stood down. Order: write tool, @file, /tmp scratch, /guard off last. A blocked probe is a cannot-run.