I had Opus 5.5 /goal its way to this in a day, using Astra for adversarial reviews
tl;dr - Pi does not ship with anything that can block potentially destructive commands like rm -rf ~/.ssh . This extension uses Jev to classify a command as potentially dangerous or not, based on the most recent messages in the conversation. If the user has said they want to rebase and force-push the local branch, it adds that to Jev's state.