HARD GATE — Confirm with user before any destructive git operation. Never reset --hard without explicit approval.

1. git status — list uncommitted and untracked files.
2. Ask: stash, discard, or keep each category.
3. Safe defaults: git stash push -u -m "reset-baseline" for WIP; never force-push.
4. Re-run setup-environment after reset.
5. Run test baseline from kickoff-branch verify command.

→ verify: git status --short | wc -l | awk '{if($1==0) print "OK"; else print "DIRTY:" $1}'