> I don't want LLMs performing any git operations that add or push commits.

Why not? It seems rather odd to let it generate code but draw the line at git commands. Maybe a quick reminder that git operations have detailed history and are entirely reversible is in order.

Do you even LLM at that point?