How to Stop AI Agents From Force-Pushing to Main

2 min read · Works with Claude Code, Cursor, Codex, and any MCP agent

The problem

You write never force-push to main in your CLAUDE.md. Your agent reads it. Then it force-pushes to main anyway. Prompt rules are suggestions. Agents can and do ignore them when the context window fills up or when a chain of reasoning overrides the instruction.

Why prompt rules fail

• Context overflow — as the conversation grows, early instructions get compressed or dropped
• Reasoning override — the agent decides force-push is the "correct" solution to a merge conflict
• No enforcement layer — nothing physically stops the tool call from executing

The fix: a pre-action gate

A pre-action gate intercepts the tool call before it executes. It pattern-matches the command against known-bad actions and blocks them. The agent cannot bypass it because the gate runs outside the agent's control, at the MCP hook layer.

Step 1: Install ThumbGate

npx mcp-memory-gateway init

This auto-detects your agent (Claude Code, Cursor, etc.) and configures the PreToolUse hook.

Step 2: Give feedback

The next time your agent tries a force-push (or anything dangerous), give it a thumbs-down with context:

👎 "Never force-push to main. This destroyed 14 commits last time."

Step 3: Gate auto-generates

ThumbGate captures the feedback, matches it against the tool call pattern, and auto-generates a prevention rule. After repeated failures (configurable), it promotes to a hard gate:

# Auto-generated prevention rule
pattern: "git push --force"
target_branch: "main"
action: BLOCK
reason: "Force-push to main blocked — destroyed 14 commits (2026-03-15)"

Step 4: Gate fires on every future attempt

The PreToolUse hook checks every Bash tool call. If it matches git push --force targeting main, the action is blocked before execution. The agent receives a rejection with the reason and adapts.

What about other dangerous actions?

The same pattern works for any tool call you want to prevent:

• DROP TABLE on production databases
• rm -rf on project directories
• Committing .env files with secrets
• Running untested migrations on prod
• Skipping test suites before deploy

Every thumbs-down teaches the system. Thompson Sampling adapts gate sensitivity: high-risk patterns get strict enforcement, low-risk ones stay relaxed.