shell-hygiene

Use run_in_background: true and wait for the automatic completion notification instead of polling with sleep. If you must poll a condition, use an until-loop like `until grep -q "done" file; do sleep 3; done`, which is allowed because sleep is not the first token.

A leading sleep followed by any command is detected and rejected before execution because sleep chains waste tool-call budget on polling. Splitting into shorter sleeps is also blocked; use background notifications or Monitor until-loops instead.

zsh does not word-split unquoted parameter expansions by default, so the whole multiline variable becomes one iteration. Iterate with `printf '%s\n' "$var" | while IFS= read -r x` or pass lists as explicit arrays like "${files[@]}".

Never delete .git/index.lock yourself, since a live git process may hold it and removal corrupts its commit. Retry the commit in a bounded loop (up to 15 attempts with short sleeps); the lock clears once the other process finishes.

Apply a 15-minute hard wall-clock ceiling to external dispatches like codex exec or kimi -p, since a hung process looks identical to a slow one. Monitor the PID in a loop and force-kill it when the deadline passes.

Create a private mode-700 directory with mktemp -d, download inside it, chain curl success before bash with `curl ... && bash`, and remove the directory on exit via a trap unless artifacts are explicitly kept for review.