Guardrails for vibe coders: PreToolUse rules that stop rm -rf and secret leaks

Copy-paste PreToolUse rules for Claude Code, Codex, OpenCode and Grok Build that block rm -rf, force-pushes and .env leaks. Every rule tested.