HHOL Guard
HOL Guard acts as a local checkpoint between AI coding agents—such as Claude Code, Codex, Cursor, and Gemini CLI—and the developer's machine. When an agent attempts to execute a shell command, read a sensitive file, make an MCP call, install an extension, or install a package, the local policy permits, blocks, or prompts you regarding the action; every decision is recorded in the local history. The core is open-source under the Apache-2.0 license (`pipx install hol-guard && hol-guard init`); an optional paid Guard Cloud service is also available. It is neither a network gateway nor a firewall.