My agents run without permission prompts, so the brake moved into the hook

The permission prompt only fired when I was watching. A hook now refuses force pushes, shared-tree resets and root deletes in every mode, and redirects the session instead of waiting for me.