AI coding agents run shell commands with no audit trail. I built a fix | Hacker News Reader