I asked an AI agent to delete a folder my tool was guarding. Here's everything that went wrong.

I build Termaxa, a small Rust CLI that gates the shell commands AI coding agents run: it previews what a command will actually do, backs up first, applies an allow/ask/deny policy, and logs everything