Safety Guide

• No sandbox — production only
• Do not paste secrets into chat/Git/issues
• Default is read-only
• Writes need allow + confirm: true; prefer dry_run
• Avoid logging personal data