Lock a path: Agents need your Approval to change it (no path: list Protected Paths)
aos protect <path>