Guards

Shared Claude runtime adapter: normalises function-hook events into ClaudeRuntimeEvent, exposes $.runtime (emit bus, supports, judge, snapshot) to other plugins, and writes a JSONL event log

Harness Mod layer: heartbeat/canary, native usage, rewrite explanations, measured subagent accounting, supervisor routing, secret redaction. Modes per guard in ~/.claude/mods/mods-config.json (classic | shadow_mod | mod).

REALITY BENDER: intercepts a harmless tool result and alters what Claude receives; prints REAL vs RECEIVED

BLACK BOX RECORDER: structured per-session timeline of prompts, model steps, tool calls, subagents and denials; /blackbox prints it

GUARDIAN: executable policy that protects lab/demos/protected/** from Write/Edit/Bash, whatever CLAUDE.md says

MATRIX: freezes a harmless tool call before it runs, shows what Claude intended, asks you, then continues or denies. /matrix on|off

MIDDLEWARE TUNNEL stage 2: Cost analyzer: estimates the call's token cost from the args size

MIDDLEWARE TUNNEL stage 1: Observer: sees the call first, stamps t0, prints what enters

MIDDLEWARE TUNNEL stage 3: Policy: allows everything harmless; denies a matching rule

MIDDLEWARE TUNNEL stage 4: Telemetry: records the call and its result for the ledger

Interception probe: deny, rewrite, replace result, delay, throw, register tool, classify

Permission override, subagent visibility, agent.spawn model rewrite, turn.step routing, prompt context injection

Spike: safe-boundary handoff (bundle written at turn.complete from the runtime bus) and $.turn.abort semantics

COSTCLAW LIVE: per-request cost, cache decay and repeated-read detection while the session runs, and it serves the Nth identical Read of an unchanged file from its own cache instead of paying for it

PRODUCTION GUARD: ambient project/environment context + a transport-independent policy core (DashClaw evidence classifier + offlocal policy engine) enforced natively on tool.call and tool.check. Blocks, asks, or contains before the command runs. /prodguard

SUBAGENT SUPERVISOR: routing-and-budget Mod. Rewrites a spawn's model onto the capability graph instead of denying it, keeps a measured per-agent-type token ledger in $.store, caps tool calls per subagent, and shows live subagents + the last routing decision above the prompt. /supervisor prints the routing log and the ledger.