It's the same idea working the way it should. This repo got the same treatment, seventeen times. A review agent that hadn't seen the code went after the first version and found six ways past the gate, ...
Guardrails for Claude Code agents: a hook that blocks unapproved email sends, deterministic outbound checks, and a read-only reviewer - agent-guardrails/README.md at main · Patriot117/agent-guardrails ...