vaara-governance

vaaraio/vaaraby Henri Sirkkavaara
security11 stars

Runtime tool-call governance for Claude Code. Layer-1 regex deny on Bash/WebFetch/WebSearch plus file mutation (Write/Edit/NotebookEdit). Layer-2 conformal risk classifier on mcp__* tools. Hash-chained SQLite audit trail at ~/.vaara/claude-code/audit.db.

Install

/plugin install vaara-governance@vaaraio-vaara