$ neti hook --demo --mode enforce -c neti.yaml -r h.ndjson
[exit 0]
{"hookSpecificOutput": {"hookEventName": "PreToolUse", "permissionDecision": "ask", "permissionDecisionReason": "Preflight needs confirmation: /to resolves to 500 recipients, above the declared ceiling of 50. An operator must approve it before it can run.", "neti": {"error": "preflight_ceiling_exceeded", "verdict": "confirm", "rule": "/to:magnitude>50", "decision_id": "<id>", "parameter": "/to", "unit": "recipients", "resolved": 500, "ceiling": 50, "session_total": 500, "session_ceiling": 200}}}
