8 AI agents build software autonomously. None of them can go rogue.

{
  "hooks": {
    "SessionStart": [
      { "hooks": [{ "command": "session-start.sh", "once": true }] },
      { "matcher": "compact", "hooks": [{ "command": "post-compact-reinject.sh" }] }
    ],
    "PreToolUse": [
      { "matcher": "Write|Edit", "hooks": [{ "command": "check-write-permission.py" }] }
    ],
    "PostToolUse": [
      { "matcher": "Write|Edit", "hooks": [{ "command": "update-progress.py" }] }
    ],
    "UserPromptSubmit": [
      { "hooks": [{ "command": "inject-craft-context.sh" }] }
    ],
    "PreCompact": [
      { "hooks": [{ "command": "export-progress.sh" }] }
    ],
    "Stop": [
      { "hooks": [{ "command": "stop-hook-guard.sh" }] }
    ]
  }
}

#!/bin/bash
# When skill A invokes skill B, A drops a breadcrumb file.
# If the agent tries to stop after B completes, this hook
# reads the breadcrumb and injects "keep going."

BREADCRUMB="${PROJECT_ROOT}.craft/.continuation"
if [ -f "$BREADCRUMB" ]; then
  CRUMB_AGE=$(($(date +%s) - $(stat -f %m "$BREADCRUMB")))
  if [ "$CRUMB_AGE" -lt 1800 ]; then
    ACTION=$(grep '^ACTION:' "$BREADCRUMB" | sed 's/^ACTION: //')
    SKILL=$(grep '^SKILL:' "$BREADCRUMB" | sed 's/^SKILL: //')
    ARGS=$(grep '^ARGS:' "$BREADCRUMB" | sed 's/^ARGS: //')
    rm -f "$BREADCRUMB"  # One-shot: consumed on read

    echo "{\"systemMessage\": \"DO NOT STOP. Skill chain in progress.
      Invoke ${SKILL} with args: ${ARGS}\"}"
    exit 0
  fi
fi