Git Safety

Two guards, one repository you already work in every day:

• Staged guard — nothing sensitive enters the next commit.
• Operation guard — no destructive git command runs unconfirmed and unbacked.

Both are recurring. They run at commit time and at push time, on every branch, forever. A one-time audit of a whole repository before it goes public is a different moment — see Related.

Contract

Inputs:

• Repository root
• Mode: scan, guard, prevent, clean, or full
• For clean: the leaked path or secret string, and the refs it touches