Hot take, if you are unwilling to approve rm you should rethink your workflow, git state, or backups.
Note
This is meant for normal project work with an agent working in the context of a single project, with directory level access to the project.
approve rm
Hot take, if you are unwilling to approve rm you should rethink your workflow, git state, or backups.