PreToolUse / PostToolUse

The two classic hook moments: right before a tool runs (gate it) and right after (enforce follow-ups, like logging every change).