CARE: Pre-Execution Command Verification for Shell-Executing LLM Agents
CARE (Canonicalization, Attribution, and Resolution Engine), a shell-specific, static-first verifier for individual shell commands before execution can reduce dispatch-boundary risk for LLM agents while preserving most benign workflows.