Expand description
Command classification and passthrough policy (spec §11).
Default is passthrough. A command is optimized only when the shim is known, the family is supported, the args match a whitelist, it is not interactive, Dejavu is not disabled, and config allows it. Anything ambiguous — in particular any git subcommand not provably read-only — passes through.