- document shadow and enforce usage, configuration, logs, and tools - reorder the project authorizer chain to inner-cmd then ai-bash-judge