H
With HOL Guard, coding agents keep working, but shell commands, secret access, MCP calls and package installs are checked against your policy first. Local Guard is free, open source (Apache-2.0) and runs locally; Guard Cloud is an optional paid add-on for teams. Install with: pipx install hol-guard && hol-guard init. Scan is not a safety guarantee. Maker: HOL.