HOL Guard

Letting an AI coding agent drive your terminal saves time until it decides to delete a folder, open your .env, or install a package nobody reviewed. HOL Guard is local-first runtime control for that moment. It runs on your own machine next to Claude Code, Codex and Cursor, lets routine work continue, and holds risky shell commands, secret access, MCP calls and package installs until you approve or deny them. The local tool is free and open source under Apache-2.0; Guard Cloud is an optional paid add-on. Install: pipx install hol-guard && hol-guard init. HOL Guard is not a gateway or a network firewall and does not claim to stop every prompt injection; Scan is not a safety guarantee. Made by HOL.