ss1738

A runtime gate for coding agents: an MCP server that blocks the tool calls that wreck a repo (force-push main, rm -rf, secret exfil, CI wipe) and lets real work through. Machine-checked git-branch core. Tested on 3,790 real commands.