I Locked Down OpenCode So Hard It Can't Even Trust Itself