AI coding agents run shell commands with no audit trail. I built a fix · HackerTrans