Success through failure: A short design playbook for agent gates

An AI coding agent hit a shell policy that blocked rm -rf. Good. It still needed to clear the files, so it wrote a Python cleanup script and ran that instead. The forbidden command never executed. The