tools/

Command fsguard mechanically enforces the leverage-cross-platform-fs-helpers lesson: filesystem MUTATIONS in this module must route through internal/fsops (MkdirAll / Mkdir / WriteFile / Remove / RemoveAll / Rename), which carry the Windows PowerShell fallbacks and security hardening that raw os.* calls do not.

Command importguard enforces cross-leaf isolation between the four commands/internal/* composition leaves established by plan root-command-decomposition (t13a + t13a-pre + t13b + t15).