engineering The Command You Approve Is Not the Command That Runs Why approved commands run as something else: shell expansion rewrites what your agent's safety check read. A case for guarding at execution. August 25, 2026 · 5 min read swift ai-agents