Skip to content

v0.1.0 — guardrails: safe-by-default Claude Code

Choose a tag to compare

View all tags
@choiyounggi choiyounggi released this 13 Jul 05:22
v0.1.0
6f2bddc

First public release of groundwork — a safe-by-default Claude Code harness starter pack.

guardrails (v0.1.0)

A PreToolUse Bash guard + a redacted audit log. Local-only, zero-config, MIT.

  • Blocks supply-chain (piping a remote script into a shell), disk-destroying (dd/mkfs), and fork-bomb commands.
  • Asks before rm -rf, force-push, DROP/TRUNCATE, kubectl delete, credential/.env access, and cloud-resource deletion.
  • Redacted audit log — tokens/passwords masked before they're written.
  • Every rule is off / ask / block, per-repo or global, plus your own patterns.
  • Works in --dangerously-skip-permissions (yolo) mode — a PreToolUse deny still stops the command (verified headless).
  • /guardrails:self-test proves it live in ~10s, executing nothing.
  • bats tests + CI.

Bundled with dev-loop (a wiki-grounded plan→verify loop) in the same marketplace; the guard stands alone.

Install

/plugin marketplace add choiyounggi/groundwork
/plugin install guardrails@groundwork

MIT.

Assets 2
Loading