System F Software

Blocks unsafe git subtree invocations: URL fetch, missing --squash, missing -S/--gpg-sign, and subtree push.

Lints every agent edit with oxlint (PostToolUse) and blocks edits that weaken the oxlint config (PreToolUse).