warden

Defined in hooks/hooks.json

Guards Bash tool calls via PreToolUse hook with bash script matcher and runs session initialization script on SessionStart. Executes bash, no file writes.