Code-enforced boundaries for PostgreSQL, Git, server logs, Feishu, web publishing, and orchestration. Scripts block dangerous operations — prompts can't override.