Enforce with config, not attention — scope and permission guardrails for coding agents
Enforcing multi-repository AI agent work through declared scopes and permissions: per-session guardrail design, a self-restraint that keeps the agent away from its own permission definitions, and a double lock on push.