OPSEC for Agents: Scope, Caps, Monitoring, and Kill Switches

OPSEC for Agents: Scope, Caps, Monitoring, and Kill Switches In April 2026, I had an allowlist with Bash(*) because I was going to narrow it later. Later never arrived. I trusted the validation hook, a regex that blocked rm on paths outside workspace/. The regex had \s+ where it should have been \s*, so rm -rf /home/rx/projects/old-backups/...