Guards

A ledger of what Claude touched this session: files created and edited, commands run and whether they failed, the git diffstat after each turn. /receipts prints it as Markdown for a PR description or a standup, or copies it to the clipboard.

Keeps secrets out of the transcript and out of the repo: redacts API keys, tokens, private keys and password URLs from tool results before Claude reads them, and refuses a Write, Edit or Bash command that embeds one.

Catches slop as Claude writes it: refuses a file edit that replaces code with a '... rest of the code' placeholder, and tracks TODO stubs, not-implemented throws, debug prints, @ts-ignore and other leftovers in a band above the prompt and a /slop pane.

Runs your test suite after every turn in which Claude changed source, and keeps the result above the prompt: green with the pass count, red with the first failing test. Detects bun, npm, pytest, cargo and go, or runs the command you set. Toasts on a regression and a recovery.

Holds destructive commands until you say so: rm -rf, force pushes, git reset --hard, DROP TABLE, curl | sh, sudo, chmod -R 777, edits to .env. One question in Claude's own dialog, fail-closed if the guard itself breaks, and a /tripwire log of every decision.