Initial public release of herdr-guard, a cross-agent command policy plugin for Herdr.
Highlights
- Audits, alerts, and best-effort interrupts dangerous shell commands across Herdr panes
- Uses live
pane.output_matchedevents withpane.readreconciliation and sweep backstop - Protects against replayed scrollback, alert-flood suppression, and socket/bootstrap failures
- Ships conservative destructive-command, exfiltration, publish, and evasion rules
- Supports private per-user configuration and constrained project-local substring rules
- Includes startup/watchdog recovery, secure audit rotation, command testing, and pause/resume actions
Requirements
- Herdr 0.7.5 or newer
- Node.js 20 or newer
- macOS or Linux
Verification
The release passed 23 automated runtime and policy tests from a clean GitHub clone.
Security model
Shell input coverage is strong but interruption remains best-effort. Agent TUI tool calls are only visible incidentally, popup panes are not visible in Herdr v0.7.5, and a same-user process can disable or kill the guard. See the README for the full honest coverage contract.