vaara-governance
vaaraio/vaaraby Henri Sirkkavaara
security11 stars
Runtime tool-call governance for Claude Code. Layer-1 regex deny on Bash/WebFetch/WebSearch plus file mutation (Write/Edit/NotebookEdit). Layer-2 conformal risk classifier on mcp__* tools. Hash-chained SQLite audit trail at ~/.vaara/claude-code/audit.db.
Install
/plugin install vaara-governance@vaaraio-vaara