Anyone using hooks as actual guardrails? What's in your PreToolUse setup?

Feels like hooks are mostly discussed for formatting, notifications, and workflow stuff, but PreToolUse can straight up block actions before they run. Deny certain bash patterns, protect specific paths, gate network stuff.

If you're using hooks for safety rather than convenience: what's in yours? What made you set it up just a near miss or just caution? And what do you wish hooks could catch that they currently can't?

Asking because I keep going back and forth between hand-rolling more of this and it feeling like something that should just exist as a maintained package.