safe-agentic-world/nomos

Deny-wins policy hook for Claude Code and Codex. Checks every shell, file, and fetch call against rules you keep in Git, holds under --dangerously-skip-permissions, refuses commands it cannot parse, and keeps a hash-linked audit log.

语言：Go · GitHub 星标：19 · Fork：1

话题：agent-guardrails · agent-security · ai-agents · ai-security · audit-logging · claude-code · claude-code-hooks · cli

在 GitHub 上查看原仓库