"""Rivet tool harness — git-aware file access, git history, schema
inspection, and test running, all behind the SecurityMonitor guard."""