Incident-derived guardrail hooks and a plan→implement→verify→crosscheck delivery loop for Claude Code. Hook cost measured; 35 bats tests.

A configurable branch-role guard for AI coding agents (DSH / Claude Code / Codex / OpenCode / Antigravity / Pi / CodeBuddy / ZCode / Cursor) — zero-config defaults (develop+main) out of the box, deep-merge override, per-client native hooks via gitflow-gua

The vendor-neutral protocol for AI agent safety & security — and the neutral benchmark that ranks the vendors.

A Claude Code mod that holds subagent fan-out, heavy-context prompts and retry loops before they spend your usage window. It reads your plan's usage, counts agents across every session, and asks in Claude Code's own dialog.

Real-time cost tracking and budget management for Claude Code. Zero setup. No Docker. No Grafana. Just install and go.

@codapult/guard is local-first, model-agnostic architecture guardrail software for AI coding agents. Use it to detect architectural drift, enforce approved software architecture rules, and check code changes in JavaScript and TypeScript projects.

Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.

Keyless storefront readiness probe linking a Store Guard audit, plus dispatch estimates and quotes.

Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

Automated Test-Driven Development enforcement for Claude Code

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

TDD enforcement and guardrails for Claude Code, Codex, and GitHub Copilot CLI.

Lead validation over MCP: KVK/KBO register, EU VAT, sanctions and email checks with sources.

Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 634 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — e

Classify + announce the target Convex deployment before any deployment-affecting command; fresh explicit consent for prod actions; session read-only mode.

Classify + announce the target Convex deployment before any deployment-affecting command; fresh explicit consent for prod actions; session read-only mode.

Fastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 µs overhead at 5k RPS.

Requires dsh >= 0.1.7 (session format 4); on dsh 0.1.5 use dsh-repeat-tool-breaker@0.7. Escalating repeat detection for dsh: a synchronous ctx.tools.guard gate that counts semantic fingerprints (exact/cmd/net/host/sink) over a per-agent sliding window, wa

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

Quality gate for AI/Codex-generated pull requests: blocks TODO leftovers, leaked secrets, sloppy commits and red CI before they reach main.

Exposes an assess_repo tool that scans a repository, local folder, or npm/PyPI package and returns supply-chain risk findings with file, line, and code evidence — install-time scripts, dangerous patterns, secrets, AI-agent manipulation, impersonation and published-artifact mismatches — while never executing the target's code. Findings carry severities from info to critical so results can gate installs and CI jobs.

Enables AI assistants to perform read-only scans of local projects, Git history, GitHub Actions workflows, machines, and GitHub accounts for supply-chain malware indicators, and to access cleanup and recovery guidance.

Exposes agent-facing tools that let a personal AI agent submit each proposed action for an allow, require_approval, or deny verdict against OWASP PAA10 policy rules, plus tools to record provenance-tagged memories, log refusals, read status, and trigger a self-stop. Its decisions are advisory unless paired with the project's gating proxy or hook, which enforce them.