Main
- Command risk UX: provides explainers for destructive commands before execution.
- Custom rules: supports defining policy rules (block global npm installs, dangerous docker actions, etc.).
- Validation gate: documents a
--verify-configstep so config changes are checked before you rely on them. - Agent-friendly outputs: includes JSON mode so an agent runner can decide allow/deny deterministically.
FAQ
- Is this only for Claude Code?: It is designed around Claude Code hooks/commands, but the patterns are reusable for other agent runners.
- How do I start safely?: Run
doctor, then tryexplainon a few commands you commonly see in agent sessions. - Why validate configs?: A broken rule file can silently disable protections; validation keeps the gate trustworthy.