verify-cli-syntax config-driven (inert without config) After each assistant turn, scans the reply for high-risk CLI syntax claims and checks the session for verification evidence (--help, man page, ...