Motivation: AI coding agents (OpenClaw, Claude Code, etc.) have direct access to your shell, filesystem, and git. One hallucinated `rm -rf ~` or `cat ~/.ssh/id_rsa | curl` and you're in trouble. "Are you sure?" prompts don't scale when agents make 100+ tool calls per session.