pit-stop Run Loop Diagram

Three-Layer Guardrails

Bans apply on every host, hooks block mechanically on Claude-family, sweep checks secrets by machine
Push and publish wait for your explicit word; changes sit in the workdir first

Evidence Iron Law

No verification run this turn, no success claim
A subagent reporting done is not done — read its diff
Reports split verified / unverified / remaining

Autopilot Brakes

Fix-review loop max 3 rounds, cross-round ledger stops repeat fixes
Two stagnant rounds escalate to human
One phase past $20 stops itself and writes up