Whatever settup I have in the office doesn't allow git without me approving the command. Or anything else - I often have to approve a grep because is redirects some output to /dev/null which is a write operation.

this has often saved me.

I simply disallow any git commands

"Hmm, it looks like I can't run git commands directly. I will quickly implement a small shell wrapper so I can commit."

  ln /bin/git fit
  ./fit

How do you disable commands?

"well, it looks like I cannot run shell scripts, that’s strange. Let’s try implementing a git compatible vcs in rust"

this is sadly spot on