Small scripts Cursor runs at fixed points in an agent's lifecycle (such as before a prompt or before a file write) to enforce policy deterministically.