Blocks AI agents from bypassing git hooks: --no-verify, core.hooksPath overrides, hook-manager disable env vars, and the same hidden in git aliases or shell wrappers.