guard
- HOL Guard is local-first runtime control for AI coding agents like Claude Code, Codex and Cursor. It holds risky shell commands, secret reads, MCP tool calls and package installs at a checkpoint on your machine until you approve or block them. Free Apache-2.0 local tool; optional paid Guard Cloud.0