How to stop coding agents installing hallucinated packages: a pre-install hook, a release-age gate and an ask rule

A 33-line pre-install hook, a 7-day release-age gate and an ask rule stop agents installing invented packages. Tested on Claude Code 2.1.296 in October 2026.