project-boundary

Blocks destructive commands outside the project directory.

Allows file operations within the project (refactoring, cleanup) but prevents accidental damage outside it.