Ran the 4R audit on my whole workspace. My guards work, they just weren't getting called. I was out all weekend so I'm catching up today. Glad I did it. Context: I run everything out of one folder, ~/OS, about 219k files. Customers, services, a Telegram bot, Spanish outbound for some of my clients, around 30 hooks I built to keep the agent honest. I ran 4R v1.5.3 on the whole thing, did one fix pass, then re-audited the same day. What it found that I would never have found myself: 1. My Spanish proofread gate was blind on 3 of 4 send routes. I moved all my Gmail to Composio a few weeks ago. The gate still only watched the old Gmail tools. So a Spanish email to a customer could go out with no proofread at all. The hook was fine. The wiring wasn't. 2. A leftover "proofread passed" marker had been sitting in /tmp for over 2 hours, with no age limit. The next Spanish send would have gone straight through. It's good for 15 minutes now. 3. 6 of my rules lived only as a sentence in a context file. Planted tests went right past every hook. Supabase GRANTs, no new files in the root, date prefixes on file names, things like that. 5 of the 6 are hooks now. 4. The cold walk was the best part. A fresh agent with no context got stuck exactly where my files contradicted each other (my root file said meeting action items live per customer, the skill still wrote them to one central file). I would have sworn that was fixed. 5. 7 repos had commits that never reached GitHub, including my whole .claude folder with no online copy. That one hurt a bit. something to point out: the planted tests are saved, so the next audit replays them first. 48 of 48 hold today. If I break a guard next month, I'll know.