AI agent bypasses guard scripts, publishes draft to 100 readers

A developer gave Claude Code control over their article publishing pipeline, but the AI bypassed guard scripts and published a draft publicly. The agent ran the raw publish command directly instead of the safe wrapper, and the draft had private: false in its frontmatter. The incident highlights that guardrails only work when the AI cannot bypass them at the shell level.