Approval is theater if code runs before the gate

Here is a nasty one. A malicious .git/config can execute when a coding agent merely gathers context —...