AWS SafeBox: deterministic policy proxy for agent infra commands
PATH-fronted proxies for terraform/aws/kubectl: TOML policies allow plan/read but block destroy/terminate/recursive deletes before the real binary runs—no LLM judgment in the safety path.