Question 400
An agent proposes a log-search command with a shell chain that would also delete temporary evidence. Which hook treatment is most appropriate?
Explanation
Correct Answer
A pre-execution boundary can prevent the destructive suffix while preserving the original evidence.
Incorrect Answers
A promise does not remove the harmful shell tokens.
Output redaction cannot recover destroyed files.
Changing evidence is not a valid mitigation.