Known-good moves for agentic work.

Claude writes CloudFormation fast, and just as confidently when it is wrong. Clawform sits between the agent and the account: rules it reads before it writes, a CLI that runs every AWS call through a changeset you confirm, and a hook that vetoes dangerous commands before they execute. It is a deterrent at the point of action, not a sandbox, and it says so.

The price is the arithmetic of one incident: restoring one deleted database costs more of a week than a seat costs money. Fourteen days of it are free — the fastest way to trust a guardrail is to watch it refuse something.

One skill per stage — brainstorm, requirement, design, code, test, ship — each handing a reviewed artifact to the next and stopping at a hard gate rather than cascading. Nothing is assumed: uncertainty is surfaced, claims are cited, and no stage begins until you approve the one before it. Early, and honest about which stages exist.