The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by agents.