When shell commands inside the gateway get blocked with "Gateway would kill this command before it could complete", the guard heuristically flags the path. Even read-only scripts like check_backlinks.sh and check_knowledge_index.sh get blocked from subagent terminals.
Fallback order for knowledge / broken-link checks:
~/.hermes/cron/output/check-backlinks-last.txt— canonical nightly cron artifact. Format:[ts] rc=N scanned_md=N total_links=N unique_targets=N broken=Noperations/audit/backlinks-report-YYYY-MM-DD.md— full §1/§2/§3 v3 backlink bus sectionoperations/logs/YYYY-MM-DD.md— grep "check_backlinks|broken_count" for narrative
Reporting: do NOT fabricate stdout. Cite the cache file + values used.