An engineer writes a Claude Code hook script for Bash commands. It must stop any command that contains "git push --force" and tell Claude why, so Claude can choose a safer alternative. The script is registered correctly and its pattern matching works. Which behavior makes the block actually happen?