13.6% is the number that stings: a human clicking through approval prompts is a weaker gate than a classifier that never gets tired. Of the three, a Stop hook that runs the tests before the session may end is the cheapest to add. Did the test say how much of the missed 11% was actually destructive?