aport-guardrails

Defined in hooks/hooks.json

Runs pre-tool-use.sh script before every tool use (matcher * on PreToolUse), enabling potential blocking or modification of tool calls. No bash or file writes.