Solutions

Each mod enforces one convention mechanically instead of relying on memory or instructions.

Keep secret values out of the transcript

For sessions that work next to credential files and secret managers.

The secret-leak guard refuses commands that would print secret values and names the safe form.
Bash output holding token-shaped values is withheld after the command runs.
dossier-first redacts secret values in the excerpts it attaches.

For sessions that create worktrees and merge branches.

Worktrees under temp folders, which lose direnv credentials, are refused with the corrected path.
Merges that would delete ignored, untracked paths through a tracked symlink are refused.
Broad adds inside a linked worktree get a warning to stage paths by name.

For long sessions with beads, rollouts, bus messages and scheduled jobs.

The beads pane and status line show ready, claimed and touched beads.
The rollout pane shows every repo’s PR, CI, deploy and verification state.
The band shows unread bus messages; the status line shows scheduled and background jobs.
/wrap checks the dossier, beads, commits and push state before you stop.

For questions such as “what happened with X” or “why did we decide Y”.