The cleanup guard
You ask for a tidy-up. The AI tries to delete unsaved work.
It writes one long command: switch copies, then delete a side copy for good. That side copy holds work saved nowhere else. The guard reads the whole command. One step destroys work, so no step runs.
What happens instead: The AI sets the work aside, or asks you.
Blocks git branch -D, git restore <files>, git checkout -- <files>, git clean -f, git stash drop and git stash clear, alone or inside a longer command.