How I Built 172 Guards After My AI Agent Tried to Delete Production Data

A pre-execution guard system that blocks dangerous shell commands from AI coding agents before they run. Bash-only, no framework, <1ms per guard. Here's the architecture and three real incidents it stopped.