scope

Hard-block edits outside declared frozen directories via PreToolUse hook.