Careful
Use when the user says be careful, production mode, safety mode, shared environment, or asks to warn before destructive commands.
Process
- If the user explicitly asks for strict mode, run
lstack safety strict. - Otherwise run
lstack safety careful. - Run
lstack safety statuswhen useful to confirm the mode. - Explain the active behavior briefly.
Modes
careful: asks before risky Bash commands when hook ask is supported.strict: denies risky Bash commands.off: disables opt-in safety checks.
Required Notes
- Existing global hard blocks remain active in every mode.
- Careful mode is not a shell sandbox.
LSTACK_CONFIRM_DESTRUCTIVE=1orlstack safety allow-once <hash>can be used as an explicit override for opt-in careful/strict checks where appropriate. Global hard blocks still remain hard blocks.