Build a Homedir Deny Fixture Before an Agent Reads `.netrc`
A developer built a pair of local test fixtures and a fail-closed gate script, assert_agent_root.py, that refuses to let a coding agent's file tools open homedir credential files such as ~/.netrc, ~/.…